Skip to content
OpenAdvisories
High · 8.5 CVE-2025-32301 EUVD-2025-15485GHSA-3w84-6c49-fr7m

WordPress CountDown Pro WP Plugin <= 2.7 - SQL Injection Vulnerability

Published May 16, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup CountDown Pro WP Plugin circular_countdown allows SQL Injection.This issue affects CountDown Pro WP Plugin: from n/a through <= 2.7.

Affected products

VendorProductAffectedFixed
LambertGroup CountDown Pro WP Plugin ≤ 2.7 —

References