VendorsPluginwaitingany version
Vulnerabilities

Plugin Builders Waiting: One-click countdowns any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2023-28659
The Waiting: One-click Countdowns WordPress Plugin, version <= 0.6.2, is affected by an authenticated SQL injection vulnerability in the pbc_down[meta][id] parameter of the pbc_save_downs action.
Published 2023-03-22 · Modified
8.8EPSS 0.009
CVE-2023-2757
Waiting: One-click countdowns <= 0.6.2 - Missing Authorization Checks leading to Authenticated (Subscriber+) Stored Cross-Site Scripting
Published 2023-05-18 · Modified
7.4EPSS 0.005
CVE-2023-3999
Waiting: One-click countdowns <= 0.6.2 - Missing Authorization
Published 2023-08-31 · Modified
6.3EPSS 0.004
CVE-2023-4000
Waiting: One-click countdowns <= 0.6.2 - Cross-Site Request Forgery
Published 2023-08-31 · Modified
6.3EPSS 0.002
CVE-2022-4954
Waiting: One-click countdowns <= 0.6.2 - Authenticated (Administrator+) Cross-Site Scripting
Published 2023-10-20 · Modified
5.5EPSS 0.003