Skip to content
OpenAdvisories

Vendor

Adam Skaat

11 known vulnerabilities.

Products

Countdown & Clock (WordPress plugin) 4 Countdown, Coming Soon, Maintenance – Countdown & Clock 2 Countdown & Clock 2 Read more By Adam 1 Read more By Adam (WordPress plugin) 1 Scroll Top 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.9
    CVE-2024-50516

    WordPress Countdown & Clock plugin <= 3.0.8 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in adamskaat Countdown & Clock countdown-builder allows Stored XSS.This issue affects Countdown & Clock: from n/a through <= 3.0.8.

    Adam Skaat Countdown & Clock
  • Medium 4.3
    CVE-2024-9187

    Read more By Adam <= 1.1.8 - Missing Authorization to Authenticated (Subscriber+) Read More Button Deletion

    The Read more By Adam plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the deleteRm() function in all versions up to, and including, 1.1.8. This makes it possible for authenticated attackers, with Subscriber…

    Adam Skaat Read more By Adam Web / CMS
  • Medium 5.4
    CVE-2024-2017

    Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.7.8 - Missing Authorization to Authenticated (Subscriber+) PHP Object Injection

    The Countdown, Coming Soon, Maintenance – Countdown & Clock plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the conditionsRow and switchCountdown functions in all versions up to, and including, 2.7.8. This makes …

    Adam Skaat Countdown, Coming Soon, Maintenance – Countdown & Clock Web / CMS
  • Medium 5.4
    CVE-2022-38085

    WordPress Read more By Adam plugin <= 1.1.8 - Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Read more By Adam plugin <= 1.1.8 at WordPress.

    Adam Skaat Read more By Adam (WordPress plugin) Web / CMS
  • Medium 4.8
    CVE-2022-29422

    WordPress Countdown & Clock plugin <= 2.3.2 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

    Multiple Authenticated (admin+) Persistent Cross-Site Scripting (XSS) vulnerabilities in Adam Skaat's Countdown & Clock plugin <= 2.3.2 at WordPress via &ycd-countdown-width, &ycd-progress-height, &ycd-progress-width, &ycd-button-margin-top, &ycd-button-margi…

    Adam Skaat Countdown & Clock (WordPress plugin) Web / CMS
  • Medium 4.7
    CVE-2022-29421

    WordPress Countdown & Clock plugin <= 2.3.2 - Reflected Cross-Site Scripting (XSS) vulnerability

    Reflected Cross-Site Scripting (XSS) vulnerability in Adam Skaat's Countdown & Clock plugin on WordPress via &ycd_type vulnerable parameter.

    Adam Skaat Countdown & Clock (WordPress plugin) Web / CMS
  • Medium 5.9
    CVE-2022-29420

    WordPress Countdown & Clock plugin <= 2.3.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Adam Skaat Countdown & Clock (WordPress plugin) countdown-builder allows Stored XSS.This issue affects Countdown & Clock (WordPress plugin): from n/a …

    Adam Skaat Countdown & Clock (WordPress plugin) Web / CMS