CVE-2026-111034

The Countdown, Coming Soon, Maintenance – Countdown & Clock WordPress plugin (versions up to and including 3.0.8 ) is vulnerable to a non-public post title disclosure via the select2Ajax AJAX action. The plugin fails to verify if a user is authorized to browse content before returning post titles...