WordPress Countdown Widget

WordPress Countdown Widget has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2022; all 3 are fixed as of September 2026. Their average CVSS score is 6.6, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2022 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Cross-Site Request Forgery (CSRF).

Every one of the 3 issues recorded for WordPress Countdown Widget has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.6/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WordPress Countdown Widget vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2022-45847

WordPress Countdown Widget <= 3.1.9.1 - Cross-Site Request Forgery to Plugin Settings Update

Read the full analysis

Vulnerability Records

3 records


2022-09-19 00:00	WordPress Countdown Widget <= 3.1.9.2 - Authenticated (Administrator+) Stored Cross-Site Scripting WordPress Countdown Widget <= 3.1.9.2	`CVE-2022-2944`	5.5 Medium	Marco Wotschka	Yes
2022-09-06 00:00	WordPress Countdown Widget <= 3.1.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting WordPress Countdown Widget <= 3.1.9.1	`N/A`	5.5 Medium	Anonymous	Yes
2022-09-06 00:00	WordPress Countdown Widget <= 3.1.9.1 - Cross-Site Request Forgery to Plugin Settings Update WordPress Countdown Widget <= 3.1.9.1	`CVE-2022-45847`	8.8 High	Rasi	Yes

Showing 1–3 of 3 reports