Wpdeveloper Countdown Block vulnerabilities

1 vulnerability

Known vulnerabilities in Wpdeveloper Countdown Block, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2021-24633unknowncountdown block+2
EPSS score
0.67%
The Countdown Block WordPress plugin before 1.1.2 does not have authorisation in the eb_write_block_css AJAX action, which allows any authenticated user, such as Subscriber, to modify post contents displayed to users.