Countdown Timer Block – build urgency for events and launches

Countdown Timer Block – build urgency for events and launches has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10.

The most common weakness is Authorization Bypass Through User-Controlled Key, behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

Every one of the 2 issues recorded for Countdown Timer Block – build urgency for events and launches has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Countdown Timer Block – build urgency for events and launches is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Countdown Timer Block – build urgency for events and launches vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-26938

Countdown Timer <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
Countdown Timer Block – build urgency for events and launches banner
Latestv1.3.3

Countdown Timer Block – build urgency for events and launches

bPlugins

Author

bPlugins

4.0(4)
80/100
Last Updated
2026-08-30 (14d ago)
Active Installs
2,000+
Downloads
44,524
Requires WP
6.5+
Requires PHP
7.4+
Tested up to
WP 7.1
Created
2021-09-02 (5y ago)

Show visitors exactly how long they have left – add a professional countdown timer to any post or page and turn deadlines into action. Countdown Timer Block | Documentation | Pricing Why Countdown Timer Block? Nothing motivates visitors like a ticking clock. Countdown Timer Block adds a dedicated block to the WordPress Block Editor so you can create a professional-looking countdown for your event, sale, or launch in minutes – no code required. Choose from four distinct layouts, toggle days, hours, minutes, and seconds on or off, and style every part of the timer – wrapper, boxes, digits, labels, and separators – to match your brand. Predefined patterns give you ready-made designs, and the timer stays fully responsive on mobile devices. Free Features Layout Options: Choose from 4 distinct templates for different presentations. Responsive: Looks great on mobile devices out of the box. Element Visibility: Toggle the visibility of labels, days, hours, minutes, and seconds. Wrapper Customization: Configure width, background, padding, and shadow for the countdown wrapper. Boxes Customization: Define background, width, height, border, and shadow settings for the countdown boxes. Content Appearance: Adjust typography and color for the digit and label elements. Separator Customization: Display separators and configure type, size, and color settings. Patterns: Predefined designs for expanding the variety of styles. Pro Version Upgrade to Countdown Timer Pro for advanced behavior and styling controls: Expired Display: Show custom content after the countdown has elapsed. Hide at Zero: Conceal the box when the countdown timer reaches 0. Mobile & Tablet Visibility: Toggle the timer’s visibility per device. Prefix Text & Style: Display styled text before the countdown timer. Suffix Button & Style: Show a button after the timer with typography, color, and padding controls. Prefix/Suffix Direction: Control the layout flow of content before and after the timer. Single Style: Style each box individually – background, digit color, and label color. Dismiss Button: Let visitors hide the countdown manually. Extra Patterns: Additional predefined countdown designs. Shortcode Integration: Use the countdown anywhere via shortcode. How to Use – Quick Start Install and activate the Countdown Timer plugin. Add the Countdown Timer block from the “Widgets” block category in the Gutenberg editor. Set your target date and adjust the design from the right-side settings sidebar. Publish – your countdown is live! Use Cases Sales & Promotions: Count down to the end of a discount to create urgency. Product Launches: Build anticipation before a new product or website goes live. Events & Webinars: Show visitors exactly when your event starts. Limited-Time Offers: Pair the timer with a call-to-action button (Pro suffix button). Feedback Did you like this plugin? Dislike it? Do you have a feature request? Please share your feedback with us Check out the Parent Plugin of this plugin- B Blocks – A blocks collection and page building tool for Gutenberg. Check out our other WordPress Plugins- Html5 Video Player – Display videos as single and playlist in multiple skins. PDF Poster – Display/Embed PDF files with different styles. Html5 Audio Player – Listen audios with awesome visuals. StreamCast – Customizable radio player with different skins. 3D Viewer – Embed 3D models and 3D products with interaction. Advanced Post Block – Show posts and custom posts in different layouts. Source Code You can find the source code, report bugs, and contribute to the development of this plugin on our GitHub repository: Countdown Timer on GitHub Third-Party Libraries This plugin bundles the following third-party JavaScript/PHP libraries. Freemius Lite SDK Source: https://bplugins.com/ GitHub: https://github.com/bPlugins/freemius-lite-sdk License: GPL-2.0-or-later – https://www.gnu.org/licenses/gpl-2.0.html Purpose: Provides an opt-in consent form for usage tracking and analytics to help improve the plugin. No data is sent before explicit user consent. External Services: Communicates with api.bplugins.com (activation events) and wp.freemius.com (opt-in processing) only after user opt-in. See bPlugins Privacy Policy and Freemius Privacy Policy. bpl-tools Source / GitHub: https://github.com/bPlugins/bpl-tools License: GPL-2.0-or-later – https://www.gnu.org/licenses/gpl-2.0.html Purpose: Shared utility library providing admin dashboard components and common Gutenberg editor controls. External Services: The library may connect to bPlugins, WordPress.org, and Freemius services for product data and checkout functionality. See full details: https://github.com/bPlugins/bpl-tools#external-requests–why-they-are-made

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C