https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-26T22:47:32.466659+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-226325 EUVD-2026-226325 2026-10-26T22:47:32.469151+00:00 EUVD-2026-226325 https://cve.radiocsirt.org/vuln/fkie_cve-2021-34636 fkie_cve-2021-34636 2026-10-26T22:47:32.469180+00:00

The Countdown and CountUp, WooCommerce Sales Timers WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_theme function found in the ~/includes/admin/coundown_theme_page.php file due to a missing nonce check which allows attackers to inject arbitrary web scripts, in versions up to and including 1.5.7.

 https://cve.radiocsirt.org/vuln/ghsa-f825-g8w3-7mxh GHSA-f825-g8w3-7mxh 2026-10-26T22:47:32.469209+00:00

The Countdown and CountUp, WooCommerce Sales Timers WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_theme function found in the ~/includes/admin/coundown_theme_page.php file due to a missing nonce check which allows attackers to inject arbitrary web scripts, in versions up to and including 1.5.7.

 https://cve.radiocsirt.org/vuln/gsd-2021-34636 gsd-2021-34636 2026-10-26T22:47:32.469227+00:00 gsd-2021-34636