WordPress CVEs

Description

The Waiting: One-click Countdowns WordPress Plugin, version <= 0.6.2, is affected by an authenticated SQL injection vulnerability in the pbc_down[meta][id] parameter of the pbc_save_downs action.

Affected WordPress components

• waiting Plugin · waiting
  Confirmed match Homeless
  Version <= 0.6.2; Up to and including 0.6.2
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• n/a Waiting: One-click Countdowns WordPress Plugin — Version <= 0.6.2
• plugin waiting — Up to and including 0.6.2

References

• www.tenable.com https://www.tenable.com/security/research/tra-2023-2 Exploit, Third Party Advisory
• nvd.nist.gov Official NVD record