Countdown And Countup Woocommerce Sales Timer

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-47533 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Countdown And Countup Woocommerce Sales Timer

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2021-34636 HIGH PATCH This Week

The Countdown and CountUp, WooCommerce Sales Timers WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_theme function found in the ~/includes/admin/coundown_theme_page.php file. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Request Forgery (CSRF) vulnerability could allow attackers to trick authenticated users into performing unintended actions.

CSRF WordPress PHP Countdown And Countup Woocommerce Sales Timer

NVD

CVSS 3.1

8.8

EPSS

0.6%

CVE-2023-47533

EPSS 0% CVSS 4.8

MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Countdown And Countup Woocommerce Sales Timer

NVD

CVE-2021-34636

EPSS 1% CVSS 8.8

HIGH PATCH This Week

CSRF WordPress PHP +1

NVD