8.8
High
CVE-2023-28659 The Waiting: One-click Countdowns WordPress Plugin,…
Description
The Waiting: One-click Countdowns WordPress Plugin, version <= 0.6.2, is affected by an authenticated SQL injection vulnerability in the pbc_down[meta][id] parameter of the pbc_save_downs action.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Waiting: One-click Countdowns WordPress Plugin 0.6 | earliest → 0.6.2 | No fix stated |