Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Adam Skaat Component: Countdown Builder Clear all filters
TI-2024-01877 CVE-2024-2017 · GHSA-pcmg-m577-c53m

Missing authorization in adamskaat Countdown, Coming Soon, Maintenance – Countdown & Clock

Priority LOW 24

The Countdown, Coming Soon, Maintenance – Countdown & Clock plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the conditionsRow and switchCountdown functions in all versions u…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00317 Published 2024-06-06 No fix listed CWE-862
TI-2022-11892 CVE-2022-29422 · GHSA-qj4c-v937-98h3

Cross-site scripting in Adam Skaat Countdown & Clock

Priority LOW 23

Multiple Authenticated (admin+) Persistent Cross-Site Scripting (XSS) vulnerabilities in Adam Skaat's Countdown & Clock plugin <= 2.3.2 at WordPress via &ycd-countdown-width, &ycd-progress-height, &ycd-progress-width, &y…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00565 Published 2022-05-06 No fix listed CWE-79
TI-2022-11890 CVE-2022-29420 · GHSA-hqmw-gvh2-3w2v

WordPress Countdown & Clock plugin <= 2.3.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Priority LOW 27

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Adam Skaat Countdown & Clock (WordPress plugin) countdown-builder allows Stored XSS.This issue affects Countdow…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00436 Published 2022-05-06 No fix listed CWE-79