Countdown, Coming Soon, Maintenance – Countdown & Clock
Approved changes feed: RSS · Atom
cpe:2.3:a:adamskaat:countdown,_coming_soon,_maintenance_–_countdown_&_clock:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Adamskaat (76141a09-3c65-5c43-a202-7779018c96d0) |
|---|---|
| Product | Countdown, Coming Soon, Maintenance – Countdown & Clock (62e857ed-a6ac-56c2-8b18-ee410bde7636) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-2270 |
vulnerable | 2026-06-03 15:00:25.160868 |
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.8.9.1 - Unauthenticated Limited Local File Inclusion
HIGH (8.1)
The Countdown, Coming Soon, Maintenance – Countdown & Clock plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.9.1 via the createCdObj function. This makes it possible for unauthenticated attackers to include and execute files with the specific filenames on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in some cases.
Published: 2025-04-04T05:22:46.133Z
Updated: 2026-04-08T17:20:05.019Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2017 |
vulnerable | 2026-06-03 14:55:28.163271 |
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.7.8 - Missing Authorization to Authenticated (Subscriber+) PHP Object Injection
MEDIUM (5.4)
The Countdown, Coming Soon, Maintenance – Countdown & Clock plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the conditionsRow and switchCountdown functions in all versions up to, and including, 2.7.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject PHP Objects and modify the status of countdowns.
Published: 2024-06-06T02:38:13.733Z
Updated: 2026-04-08T17:26:59.614Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.