WPDeveloper countdown block vulnerabilities

Latest WPDeveloper countdown block CVEs

Newest publication first

1. CVE-2021-24633 Countdown Block < 1.1.2 - Missing Authorisation in AJAX action

   Published 2021-09-27

   Medium·CVSS 4.3 EPSS 0.67%

   The Countdown Block WordPress plugin before 1.1.2 does not have authorisation in the eb_write_block_css AJAX action, which allows any authenticated user, such as Subscriber, to modify post contents displayed to users.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.