Uji Countdown
Uji Countdown has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2016 and 2025; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 3 of the records (100%).
2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.
3 independent researchers contributed these findings, one record each. Uji Countdown is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-52749Uji Countdown <= 2.3.3 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

Uji Countdown
Author
WPmanage
Uji Countdown helps you add a clear, customizable countdown timer to WordPress without rebuilding your page layout. Use it for product launches, limited-time offers, webinars, events, maintenance notices, seasonal campaigns, and evergreen promotions. Create a timer style once, then place it where you need it with the block, shortcode, widget area, or Elementor shortcode widget. You can control the timer labels, colors, font sizing, alignment, redirect behavior, and whether the countdown uses server time or visitor time. The plugin is built for site owners who need a practical countdown timer that is easy to place, easy to style, and reliable across common WordPress workflows. Key features Countdown block – add timers in the WordPress Block Editor. Shortcode support – place timers in posts, pages, widgets, templates, and builders. Elementor friendly – use the shortcode inside Elementor shortcode widgets. Recurring and repeat timers – useful for evergreen offers and repeating campaigns. Redesigned admin experience – cleaner timer style management, shortcode generation, settings, and preview panels. Custom timer styles – adjust colors, font sizes, labels, alignment, and display options. Simple style option – display clean countdown numbers without a colored box background. Optional number animation – animate changing digits for a smoother countdown effect. Server time option – keep the countdown consistent even if a visitor changes their device clock. Expiration actions – hide the timer or redirect visitors when the countdown ends. Performance improvements – production-ready minified assets and lighter admin/front-end loading. Translation-ready labels – customize year, month, week, day, hour, minute, and second text. Pro only: responsive layouts, multiple timers per page, circular timer add-on. Common uses Sales countdowns and limited-time discounts. Product launches and coming-soon pages. Event, webinar, and conference timers. Evergreen marketing campaigns. Store announcements and seasonal promotions. Maintenance windows and scheduled notices. Works with WordPress Block Editor. Classic shortcodes. Widget areas. Elementor shortcode widgets. Most themes that support standard WordPress content output. Demo site Planned Improvements Uji Countdown is being actively maintained again. Future updates will focus on better builder compatibility, more flexible timer layouts, improved style controls, and smoother setup for new users. Support Need help? Email info@wpmanage.com or open a topic on the support forum.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C