Countdown Builder
Approved changes feed: RSS · Atom
cpe:2.3:a:edmonsoft:countdown_builder:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Edmonsoft (d923612f-d6f6-56c4-86b7-688a941bd3e4) |
|---|---|
| Product | Countdown Builder (7fb5248a-df0d-5918-8a67-ca53e50b2184) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-2017 |
vulnerable | 2026-06-08 06:33:30.147031 |
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.7.8 - Missing Authorization to Authenticated (Subscriber+) PHP Object Injection
MEDIUM (5.4)
The Countdown, Coming Soon, Maintenance – Countdown & Clock plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the conditionsRow and switchCountdown functions in all versions up to, and including, 2.7.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject PHP Objects and modify the status of countdowns.
Published: 2024-06-06T02:38:13.733Z
Updated: 2026-04-08T17:26:59.614Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29423 |
vulnerable | 2026-06-08 05:42:47.702478 |
WordPress Countdown & Clock plugin <= 2.3.2 - Pro Features Lock Bypass vulnerability
LOW (3.8)
Pro Features Lock Bypass vulnerability in Countdown & Clock plugin <= 2.3.2 at WordPress.
Published: 2022-05-06T17:40:41.844Z
Updated: 2026-04-28T16:07:41.319Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29422 |
vulnerable | 2026-06-08 05:42:47.701985 |
WordPress Countdown & Clock plugin <= 2.3.2 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities
MEDIUM (4.8)
Multiple Authenticated (admin+) Persistent Cross-Site Scripting (XSS) vulnerabilities in Adam Skaat's Countdown & Clock plugin <= 2.3.2 at WordPress via &ycd-countdown-width, &ycd-progress-height, &ycd-progress-width, &ycd-button-margin-top, &ycd-button-margin-right, &ycd-button-margin-bottom, &ycd-button-margin-left, &ycd-circle-countdown-before-countdown, &ycd-circle-countdown-after-countdown vulnerable parameters.
Published: 2022-05-06T17:37:28.491Z
Updated: 2026-04-28T16:07:41.267Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29421 |
vulnerable | 2026-06-08 05:42:47.701386 |
WordPress Countdown & Clock plugin <= 2.3.2 - Reflected Cross-Site Scripting (XSS) vulnerability
MEDIUM (4.7)
Reflected Cross-Site Scripting (XSS) vulnerability in Adam Skaat's Countdown & Clock plugin on WordPress via &ycd_type vulnerable parameter.
Published: 2022-05-06T16:58:42.534Z
Updated: 2026-04-28T16:07:41.419Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29420 |
vulnerable | 2026-06-08 05:42:47.700783 |
WordPress Countdown & Clock plugin <= 2.3.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Adam Skaat Countdown & Clock (WordPress plugin) countdown-builder allows Stored XSS.This issue affects Countdown & Clock (WordPress plugin): from n/a through 2.3.2.
Published: 2022-05-06T16:53:30.706Z
Updated: 2026-04-28T16:07:41.290Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.