Countdown And Countup, Woocommerce Sales Timer Security Vulnerabilities and Issues — Countdown And Countup, Woocommerce Sales Timer CVE List

WpdevartCountdown And Countup, Woocommerce Sales Timer

2 matches found

CVE•added 2023/11/14 9:6 p.m.•82 views

CVE-2023-47533

CVE-2023-47533 affects the WordPress plugin Countdown and CountUp, WooCommerce Sales Timer (

5.9CVSS5.1AI score0.00394EPSS

Save

CVE•added 2021/09/28 1:53 p.m.•52 views

CVE-2021-34636

The CVE-2021-34636 entry concerns the Countdown and CountUp, WooCommerce Sales Timers WordPress plugin. A missing nonce check in the save_theme function (~/includes/admin/coundown_theme_page.php) enables CSRF, allowing injection of arbitrary scripts (stored XSS) in versions up to 1.5.7. Connected...

8.8CVSS8.6AI score0.00625EPSS

Save