wpdevart / countdown_and_countup,_woocommerce_sales_timer CVEs

Beta · best-effort

2 CVEs tagged to wpdevart / countdown_and_countup,_woocommerce_sales_timer — 0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to wpdevart vendor archive

CVE-2023-47533

Published Nov 14, 2023

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Countdown and CountUp, WooCommerce Sales Timer plugin <= 1.8.2 versions.

CVSS 5.9 · Medium

evidence mentions: 1
Buzz score: 11.9

Vendor/product tagsBeta · best-effort

CVE-2021-34636

Published Sep 28, 2021

The Countdown and CountUp, WooCommerce Sales Timers WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_theme function found in the ~/includes/admin/coundown…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1