Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-47505 EUVD-2025-13819GHSA-8338-wqxp-w83r

WordPress Product Time Countdown for WooCommerce plugin <= 1.6.2 - Cross Site Scripting (XSS) Vulnerability

Published May 7, 2025 · Updated May 12, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ProWCPlugins Product Time Countdown for WooCommerce product-countdown-for-woocommerce allows Stored XSS.This issue affects Product Time Countdown for WooCommerce: from n/a through <= 1.6.2.

Affected products

VendorProductAffectedFixed
ProWCPlugins Product Time Countdown for WooCommerce ≤ 1.6.2 —

References