https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T22:14:27.111848+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24633 CVE-2021-24633 — Countdown Block < 1.1.2 - Missing Authorisation in AJAX action 2026-10-27T22:14:27.113021+00:00

Affected: Unknown Countdown Block

The Countdown Block WordPress plugin before 1.1.2 does not have authorisation in the eb_write_block_css AJAX action, which allows any authenticated user, such as Subscriber, to modify post contents displayed to users.