Read the docs

wpdevart

Records58All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9

Exploited now

wpdevart records in CISA KEV

No wpdevart vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Booking Calendar 8 records HIGH Gallery 7 records LOW Coming Soon And Maintenance Mode 3 records LOW Organization Chart 3 records LOW Countdown And Countup, Woocommerce Sales Timer 2 records MEDIUM Poll, Survey, Questionnaire And Voting System 2 records HIGH Pricing Table Builder 2 records HIGH Responsive Vertical Icon Menu 2 records LOW

Records

2 records in Countdown And Countup, Woocommerce Sales Timer · all components

TI-2021-13650 CVE-2021-34636 · GHSA-f825-g8w3-7mxh

Countdown and CountUp, WooCommerce Sales Timer <= 1.5.7 Cross-Site Request Forgery to Stored Cross-Site Scripting

Priority MEDIUM 41

The Countdown and CountUp, WooCommerce Sales Timers WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_theme function found in the ~/includes/admin/coundown_theme_page.php file due to a missing non…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00625 Published 2021-09-28 No fix listed CWE-352
Open these records in search →