Vulnerabilities and security researches forwidget-countdown widget-countdown

Jan 26, 2025

CVE, Research URL: CVE-2025-24719
Home page URL: Security reports for Countdown Timer – Widget Countdown
Application: Countdown Timer – Widget Countdown
Date: Jan 24, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevart Widget Countdown allows Stored XSS. This issue affects Widget Countdown: from n/a through 2.7.1.
Affected versions: Min -, max -.
Status: vulnerable

May 09, 2025

CVE, Research URL: CVE-2025-47443
Home page URL: Security reports for Countdown Timer – Widget Countdown
Application: Countdown Timer – Widget Countdown
Date: May 07, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevart Widget Countdown allows Stored XSS. This issue affects Widget Countdown: from n/a through 2.7.4.
Affected versions: Min -, max -.
Status: vulnerable