search
wpdevart
Trends
- 1WordPress countdown timer plugin hit by stored XSS flawโ๐จ EUVD-2026-100788 ๐ Score: 6.4/10 (CVSS v3.1) ๐ฆ Product: Countdown Timer โ Widget Countdown ๐ข Vendor: wpdevart ๐ Update
A stored cross-site scripting vulnerability has been reported in the Countdown Timer โ Widget Countdown plugin for WordPress by vendor wpdevart, tracked as EUVD-2026-100788 with a CVSS v3.1 score of 6.4. The flaw involves the plugin's 'redirect_url' shortcode, and the advisory was updated on 14 October 2026. Site owners using the plugin are being urged to review the advisory and apply any available fixes.