Countdown And Countup Woocommerce Sales Timer

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-47533 Nov 14, 21:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Countdown And Countup Woocommerce Sales Timer Wpdevart

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2021-34636 Sep 28, 14:15 HIGH PATCH This Week

The Countdown and CountUp, WooCommerce Sales Timers WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_theme function found in the ~/includes/admin/coundown_theme_page.php file. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Request Forgery (CSRF) vulnerability could allow attackers to trick authenticated users into performing unintended actions.

PHP WordPress CSRF Wordpress Plugin Countdown And Countup Woocommerce Sales Timer +1

NVD

CVSS 3.1

8.8

EPSS

0.6%

CVE-2023-47533

EPSS 0% CVSS 4.8

MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Countdown And Countup Woocommerce Sales Timer +1

NVD

CVE-2021-34636

EPSS 1% CVSS 8.8

HIGH PATCH This Week

PHP WordPress CSRF +3

NVD