CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-13735 | HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce [hurrytimer] < 2.12.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 2.12.0 | 2.12.0 | 2025-02-13 | — |
The HurryTimer plugin versions up to 2.11.2 contains a stored cross-site scripting vulnerability caused by inadequate sanitization and escaping of campaign names. Authenticated users with Contributor privileges or higher can inject malicious scripts that execute for other users viewing affected pages.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.