WordPress plugin
Countdown and CountUp, WooCommerce Sales Timer security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium1
- Low0
All Countdown and CountUp, WooCommerce Sales Timer vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.5 | Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings ≤1.8.2Update to 1.8.3 | CVE-2023-47533 | |
| High8.8 | Cross-Site Request Forgery to Stored Cross-Site Scripting ≤1.5.7Update to 1.5.8 | CVE-2021-34636 |
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
≤1.8.2Update to 1.8.3
- High8.8Cross-Site Request Forgery to Stored Cross-Site Scripting
≤1.5.7Update to 1.5.8
Countdown and CountUp, WooCommerce Sales Timer: common questions
Does Countdown and CountUp, WooCommerce Sales Timer have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Countdown and CountUp, WooCommerce Sales Timer: 1 high, 1 medium. None are known to affect version null.
How do I check which version of Countdown and CountUp, WooCommerce Sales Timer I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Countdown and CountUp, WooCommerce Sales Timer vulnerability?
CVE-2023-47533, published Nov 7, 2023: Countdown and CountUp, WooCommerce Sales Timer <= 1.8.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings. Severity: Medium (CVSS 5.5).
Is any Countdown and CountUp, WooCommerce Sales Timer vulnerability listed in CISA KEV?
No. None of the known Countdown and CountUp, WooCommerce Sales Timer vulnerabilities is currently listed in the CISA KEV catalog.