CVE-2026-24392

CVE-2026-24392 concerns a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress HurryTimer plugin (versions

CVE-2025-53255 WordPress HurryTimer plugin <= 2.13.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Nabil Lemsieh HurryTimer allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects HurryTimer: from n/a through 2.13.1...

WordPress HurryTimer plugin <= 2.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Campaign Name vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Campaign Name vulnerability discovered by zer0gh0st in WordPress Plugin HurryTimer versions = 2.11.2...