Approved changes feed: RSS · Atom

cpe:2.3:a:wpdevart:widget_countdown:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWpdevart (62458400-5314-5c71-819c-4b29c90460da)
ProductWidget Countdown (d52bc860-f249-5b2d-95e5-7bf9b047ea49)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-47443 vulnerable 2026-06-03 15:01:32.723983 WordPress Widget Countdown plugin <= 2.7.4 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevart Widget Countdown widget-countdown allows Stored XSS.This issue affects Widget Countdown: from n/a through <= 2.7.4.
Published: 2025-05-07T14:19:32.982Z
Updated: 2026-04-28T16:12:41.274Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24719 vulnerable 2026-06-03 14:59:56.731191 WordPress Widget Countdown plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevart Widget Countdown widget-countdown allows Stored XSS.This issue affects Widget Countdown: from n/a through <= 2.7.1.
Published: 2025-01-24T17:25:12.358Z
Updated: 2026-04-28T16:11:32.991Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.