What’s Vulnerable › Products
wpcalc Counter Box – Add Countdowns, Timers & Dynamic Counters to WordPress vulnerabilities
7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.
Latest wpcalc Counter Box – Add Countdowns, Timers & Dynamic Counters to WordPress vulnerabilities
- CVE-2026-12115 — Counter Box <= 2.0.13 - Authenticated (Administrator+) PHP Object Injection via Import (CVSS 6.6)
- CVE-2024-13901 — Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site <= 2.0.6 - Authenticated (Administrator+) DOM-Based Stored Cross-Site Scripting (CVSS 4.8)
- CVE-2025-24715 — WordPress Counter Box Plugin <= 2.0.5 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability (CVSS 5.4)
- CVE-2024-3481 — Counter Box < 1.2.4 - Counter Deletion via CSRF (CVSS 5.2)
- CVE-2023-2362 — Multiple Plugins from Wow-Company - Reflected XSS (CVSS 6.1)
- CVE-2022-2245 — Counter Box < 1.2.1 - Arbitrary Counter Activation/Deactivation via CSRF (CVSS 8.8)
- CVE-2022-29446 — WordPress Counter Box plugin <= 1.1.1 - Authenticated Local File Inclusion (LFI) vulnerability (CVSS 7.2)