Wpdevart Countdown And Countup, Woocommerce Sales Timer — known CVE vulnerabilities

Every CVE whose affected-product data names Wpdevart Countdown And Countup, Woocommerce Sales Timer, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-34636 — CVSS 8.8 (high): The Countdown and CountUp, WooCommerce Sales Timers WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_theme…
• CVE-2023-47533 — CVSS 5.9 (medium): Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Countdown and CountUp, WooCommerce Sales Timer plugin <= 1.8.2…