Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-57908 EUVD-2025-30746GHSA-2h75-8m87-96fc

WordPress Product Time Countdown for WooCommerce plugin <= 1.6.5 - Cross Site Scripting (XSS) vulnerability

Published Sep 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ProWCPlugins Product Time Countdown for WooCommerce product-countdown-for-woocommerce allows Stored XSS.This issue affects Product Time Countdown for WooCommerce: from n/a through <= 1.6.5.

Affected products

VendorProductAffectedFixed
ProWCPlugins Product Time Countdown for WooCommerce ≤ 1.6.5 —

References