Edmonsoft Countdown Builder — known CVE vulnerabilities

Every CVE whose affected-product data names Edmonsoft Countdown Builder, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2022-29420 — CVSS 5.9 (medium): Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Adam Skaat Countdown & Clock…
• CVE-2024-2017 — CVSS 5.4 (medium): The Countdown, Coming Soon, Maintenance – Countdown & Clock plugin for WordPress is vulnerable to unauthorized access due to a missing…
• CVE-2022-29422 — CVSS 4.8 (medium): Multiple Authenticated (admin+) Persistent Cross-Site Scripting (XSS) vulnerabilities in Adam Skaat's Countdown & Clock plugin <= 2.3.2 at…
• CVE-2022-29421 — CVSS 4.7 (medium): Reflected Cross-Site Scripting (XSS) vulnerability in Adam Skaat's Countdown & Clock plugin on WordPress via &ycd_type vulnerable parameter.
• CVE-2022-29423 — CVSS 3.8 (low): Pro Features Lock Bypass vulnerability in Countdown & Clock plugin <= 2.3.2 at WordPress.