Countdown And Countup, Woocommerce Sales Timer vulnerabilities

Product

Countdown And Countup, Woocommerce Sales Timer

by Wpdevart · last CVE Nov 14, 2023

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 1Low 0

Severity

Exploitation

Watch

Add Countdown And Countup, Woocommerce Sales Timer to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-34636	8.8	1%	Sep 28	The Countdown and CountUp, WooCommerce Sales Timers WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_theme function found in the… Affected: through 1.5.7
CVE-2023-47533	4.8	0%	Nov 14	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Countdown and CountUp, WooCommerce Sales Timer plugin <= 1.8.2 versions Affected: through 1.8.2