CVEs (1)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Wpdeveloper 1Countdown Block Jun 17, 2026 Sep 27, 2021 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 The Countdown Block WordPress plugin before 1.1.2 does not have authorisation in the eb_write_block_css AJAX action, which allows any authenticated user, such as Subscriber, to modify post contents displayed to users. |