Skip to content
OpenAdvisories

Vendor

Adam Skaat

11 known vulnerabilities.

Adam Skaat at a glance

Last 12 months
0
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202521
Mar 202500
Feb 202510
Jan 202500
Dec 202400

Products

Countdown & Clock (WordPress plugin) 4 Countdown, Coming Soon, Maintenance – Countdown & Clock 2 Countdown & Clock 2 Read more By Adam 1 Read more By Adam (WordPress plugin) 1 Scroll Top 1
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • High 8.1
    CVE-2025-2270

    Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.8.9.1 - Unauthenticated Limited Local File Inclusion

    The Countdown, Coming Soon, Maintenance – Countdown & Clock plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.9.1 via the createCdObj function. This makes it possible for unauthenticated attackers to include …

    Adam Skaat Countdown, Coming Soon, Maintenance – Countdown & Clock Web / CMS
  • Critical 9.9
    CVE-2025-30841

    WordPress Countdown & Clock plugin <=2.8.8 - Remote Code Execution (RCE) vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in adamskaat Countdown & Clock countdown-builder allows Remote Code Inclusion.This issue affects Countdown & Clock: from n/a through <= 2.8.8.

    Adam Skaat Countdown & Clock
  • High 7.1
    CVE-2025-23651

    WordPress Scroll Top plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in adamskaat Scroll Top scroll-to-top-builder allows Reflected XSS.This issue affects Scroll Top: from n/a through <= 1.3.3.

    Adam Skaat Scroll Top
  • Medium 5.9
    CVE-2024-50516

    WordPress Countdown & Clock plugin <= 3.0.8 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in adamskaat Countdown & Clock countdown-builder allows Stored XSS.This issue affects Countdown & Clock: from n/a through <= 3.0.8.

    Adam Skaat Countdown & Clock
  • Medium 4.3
    CVE-2024-9187

    Read more By Adam <= 1.1.8 - Missing Authorization to Authenticated (Subscriber+) Read More Button Deletion

    The Read more By Adam plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the deleteRm() function in all versions up to, and including, 1.1.8. This makes it possible for authenticated attackers, with Subscriber…

    Adam Skaat Read more By Adam Web / CMS
  • Medium 5.4
    CVE-2024-2017

    Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.7.8 - Missing Authorization to Authenticated (Subscriber+) PHP Object Injection

    The Countdown, Coming Soon, Maintenance – Countdown & Clock plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the conditionsRow and switchCountdown functions in all versions up to, and including, 2.7.8. This makes …

    Adam Skaat Countdown, Coming Soon, Maintenance – Countdown & Clock Web / CMS
  • Medium 5.4
    CVE-2022-38085

    WordPress Read more By Adam plugin <= 1.1.8 - Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Read more By Adam plugin <= 1.1.8 at WordPress.

    Adam Skaat Read more By Adam (WordPress plugin) Web / CMS
  • Low 3.8
    CVE-2022-29423

    WordPress Countdown & Clock plugin <= 2.3.2 - Pro Features Lock Bypass vulnerability

    Pro Features Lock Bypass vulnerability in Countdown & Clock plugin <= 2.3.2 at WordPress.

    Adam Skaat Countdown & Clock (WordPress plugin) Web / CMS
  • Medium 4.8
    CVE-2022-29422

    WordPress Countdown & Clock plugin <= 2.3.2 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

    Multiple Authenticated (admin+) Persistent Cross-Site Scripting (XSS) vulnerabilities in Adam Skaat's Countdown & Clock plugin <= 2.3.2 at WordPress via &ycd-countdown-width, &ycd-progress-height, &ycd-progress-width, &ycd-button-margin-top, &ycd-button-margi…

    Adam Skaat Countdown & Clock (WordPress plugin) Web / CMS
  • Medium 4.7
    CVE-2022-29421

    WordPress Countdown & Clock plugin <= 2.3.2 - Reflected Cross-Site Scripting (XSS) vulnerability

    Reflected Cross-Site Scripting (XSS) vulnerability in Adam Skaat's Countdown & Clock plugin on WordPress via &ycd_type vulnerable parameter.

    Adam Skaat Countdown & Clock (WordPress plugin) Web / CMS
  • Medium 5.9
    CVE-2022-29420

    WordPress Countdown & Clock plugin <= 2.3.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Adam Skaat Countdown & Clock (WordPress plugin) countdown-builder allows Stored XSS.This issue affects Countdown & Clock (WordPress plugin): from n/a …

    Adam Skaat Countdown & Clock (WordPress plugin) Web / CMS