Skip to content
OpenAdvisories

Vendor

pkthree

2 known vulnerabilities.

Products

Peter’s Custom Anti-Spam 1 Peter’s Date Countdown 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-1654

    Peter's Date Countdown <= 2.0.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']

    The Peter's Date Countdown plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it poss…

    pkthree Peter’s Date Countdown Web / CMS
  • Medium 5.4
    CVE-2024-12554

    Peter’s Custom Anti-Spam <= 3.2.3 - Cross-Site Request Forgery via cas_register_post Function

    The Peter’s Custom Anti-Spam plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.3. This is due to missing nonce validation on the cas_register_post() function. This makes it possible for unauthenticated …

    pkthree Peter’s Custom Anti-Spam Web / CMS