CVE-2025-49908 WordPress WPC Countdown Timer for WooCommerce plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPClever WPC Countdown Timer for WooCommerce wpc-countdown-timer allows Stored XSS.This issue affects WPC Countdown Timer for WooCommerce: from n/a through = 3.1.4...

PT-2025-43176

Name of the Vulnerable Software and Affected Versions WPClever WPC Countdown Timer for WooCommerce versions through 3.1.4 Description The WPC Countdown Timer for WooCommerce software contains a flaw due to improper neutralization of input during web page generation, which allows for Stored...