Skip to content
OpenAdvisories

Product · pluginbuilders

Waiting: One-click countdowns

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.5
    CVE-2022-4954

    Waiting: One-click countdowns <= 0.6.2 - Authenticated (Administrator+) Cross-Site Scripting

    The Waiting: One-click countdowns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown name in versions up to, and including, 0.6.2 due to insufficient input sanitization and output escaping. This makes it possible for authentic…

    pluginbuilders Waiting: One-click countdowns Web / CMS
  • Medium 6.3
    CVE-2023-4000

    Waiting: One-click countdowns <= 0.6.2 - Cross-Site Request Forgery

    The Waiting: One-click countdowns plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.6.2. This is due to missing or incorrect nonce validation on its AJAX actions. This makes it possible for unauthenticated at…

    pluginbuilders Waiting: One-click countdowns Web / CMS
  • Medium 6.3
    CVE-2023-3999

    Waiting: One-click countdowns <= 0.6.2 - Missing Authorization

    The Waiting: One-click countdowns plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on its AJAX calls in versions up to, and including, 0.6.2. This makes it possible for authenticated attackers, with subscriber-level …

    pluginbuilders Waiting: One-click countdowns Web / CMS