Waiting: One-click countdowns

Waiting: One-click countdowns has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2023; none of them are fixed as of September 2026. Their average CVSS score is 6.9, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2022 was the busiest year with 3 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (40%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting.

None of the 5 issues recorded for Waiting: One-click countdowns have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2022.

3 independent researchers contributed these findings, most of them (3) reported by Marco Wotschka.

Strategic Overview

Avg CVSSMedium

6.9/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Waiting: One-click countdowns vulnerabilities before they are exploited.

Most severe open issueCVSS 8.8CVE-2023-28659

Waiting: One-click countdowns <= 0.6.2 - Authenticated (Subscriber+) SQL Injection via 'pbc_down[meta][id]'

Read the full analysis

Vulnerability Records

5 records


2023-05-17 00:00	Waiting: One-click countdowns <= 0.6.2 - Missing Authorization Checks leading to Authenticated (Subscriber+) Stored Cross-Site Scripting Waiting <= 0.6.2	`CVE-2023-2757`	7.4 High	István Márton	No
2023-03-22 00:00	Waiting: One-click countdowns <= 0.6.2 - Authenticated (Subscriber+) SQL Injection via 'pbc_down[meta][id]' Waiting <= 0.6.2	`CVE-2023-28659`	8.8 High	Joshua Martinelle	No
2022-12-23 00:00	Waiting: One-click countdowns <= 0.6.2 - Missing Authorization Waiting <= 0.6.2	`CVE-2023-3999`	6.3 Medium	Marco Wotschka	No
2022-12-23 00:00	Waiting: One-click countdowns <= 0.6.2 - Authenticated (Administrator+) Cross-Site Scripting Waiting <= 0.6.2	`CVE-2022-4954`	5.5 Medium	Marco Wotschka	No
2022-12-23 00:00	Waiting: One-click countdowns <= 0.6.2 - Cross-Site Request Forgery Waiting <= 0.6.2	`CVE-2023-4000`	6.3 Medium	Marco Wotschka	No

Showing 1–5 of 5 reports