Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: pluginbuilders Component: Waiting Clear all filters
TI-2022-04543 CVE-2022-4954 · GHSA-4pgc-4ghm-q2mf

Waiting: One-click countdowns <= 0.6.2 - Authenticated (Administrator+) Cross-Site Scripting

Priority LOW 25

The Waiting: One-click countdowns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown name in versions up to, and including, 0.6.2 due to insufficient input sanitization and output escapin…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00388 Published 2023-10-20 No fix listed CWE-79
TI-2023-03713 CVE-2023-3999 · GHSA-3744-v8vp-h2jq

Waiting: One-click countdowns <= 0.6.2 - Missing Authorization

Priority LOW 28

The Waiting: One-click countdowns plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on its AJAX calls in versions up to, and including, 0.6.2.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00401 Published 2023-08-31 No fix listed CWE-862
TI-2023-02581 CVE-2023-2757 · GHSA-v4p4-cvg5-mj9g

Missing authorization in pluginbuilders Waiting: One-click countdowns

Priority LOW 33

The Waiting: One-click countdowns plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on 'saveLang' functions in versions up to, and including, 0.6.2.

CVSS 3.1HIGH 7.4 Network Low privileges No interaction EPSS 0.00454 Published 2023-05-18 No fix listed CWE-862
TI-2023-13177 CVE-2023-28659 · GHSA-5h4q-7v83-2cp6

SQL injection in Waiting: One-click Countdowns WordPress Plugin

Priority HIGH 73

The Waiting: One-click Countdowns WordPress Plugin, version <= 0.6.2, is affected by an authenticated SQL injection vulnerability in the pbc_down[meta][id] parameter of the pbc_save_downs action.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00872 Published 2023-03-22 No fix listed CWE-89