Skip to content
Sign in
5.4 Medium

CVE-2024-2017 The Countdown, Coming Soon, Maintenance – Countdown & Clock plugin for WordPress is vulnerable to unauthorized access…

Description

The Countdown, Coming Soon, Maintenance – Countdown & Clock plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the conditionsRow and switchCountdown functions in all versions up to, and including, 2.7.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject PHP Objects and modify the status of countdowns.

Affected products and versions

Product Affected versions Fixed in
Countdown, Coming Soon, Maintenance – Countdown & Clock 2.7 earliest → 2.7.8 No fix stated

Other CVEs of Countdown, Coming Soon, Maintenance – Countdown & Clock

The 2 CVEs of Countdown, Coming Soon, Maintenance – Countdown & Clock →
CVE-2025-2270 The Countdown, Coming Soon, Maintenance – Countdown & Clock plugin for WordPress is vulnerable to Local File Inclusion… 8.1 High
Track this CVE