Description
The Wow Countdowns WordPress plugin through 3.1.2 does not sanitize user input into the 'did' parameter and uses it in a SQL statement, leading to an authenticated SQL Injection.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Wow Countdowns – easily create any countdowns, counters and timers | 3.1.2 – ≤ 3.1.2 | — |