PT-2022-19596 · WordPress · Countdown & Clock

Re-Alter + 1 · Published 2022-05-06 · Updated 2023-07-20 · CVE-2022-29423

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Countdown & Clock plugin versions prior to 2.3.3

Description A Pro Features Lock Bypass issue affects the Countdown & Clock plugin at WordPress. The issue allows bypassing of pro features locks.

Recommendations For versions prior to 2.3.3, update to version 2.3.3 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2022-29423

Affected Products

Countdown & Clock

References · 5

• https://osv.dev/vulnerability/CVE-2022-29423 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29423 · Security Note
• https://wordpress.org/plugins/countdown-builder/#developers · Note
• https://patchstack.com/database/vulnerability/countdown-builder/wordpress-countdown-clock-plugin-2-3-0-pro-features-lock-bypass-vulnerability · Note
• https://t.me/cibsecurity/42144 · Telegram Post