Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 25/02/2025 Updated: 25/02/2025

Stored Cross-Site Scripting Vulnerability in bPlugins Countdown Timer <= 1.2.6

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Countdown Timer allows Stored XSS. This issue affects Countdown Timer: from n/a up to and including 1.2.6.

Update the WordPress Countdown Timer wordpress plugin to the latest available version (at least 1.2.7).

Vulnerable Product	Search on Vulmon	Subscribe to Product
bplugins countdown timer

CWE-79 https://nvd.nist.gov https://www.first.org/epss https://patchstack.com/database/wordpress/plugin/countdown-time/vulnerability/wordpress-countdown-timer-block-plugin-1-2-6-cross-site-scripting-xss-vulnerability?_s_id=cve

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2025-26938

Vulnerability Summary

Solution

References

Vulmon Search

About

Products

Connect