CVE · Critical
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-30841 | Countdown, Coming Soon, Maintenance – Countdown & Clock [countdown-builder] < 2.8.9 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | Critical 9.9 | < 2.8.9 | 2.8.9 | 2025-04-01 | — |
A security flaw exists in the Countdown & Clock plugin for WordPress, affecting all versions prior to 2.8.9. Specifically, a vulnerability allows authorized users with at least contributor permissions to inject malicious server-side code. This issue is present across the affected version range.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.