CVE-2021-34636: Countdown and CountUp, WooCommerce Sales Timer <= 1.5.7 Cross-Site Request Forgery to Stored Cross-Site Scripting
The Countdown and CountUp, WooCommerce Sales Timers WordPress plugin is vulnerable to Cross-Site Request Forgery via the savetheme function found in the ~/includes/admin/coundownthemepage.php file due to a missing nonce check which allows attackers to inject arbitrary web scripts, in versions up to and including 1.5.7.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2021-34636?
CVE-2021-34636 is a vulnerability in the Countdown and CountUp WooCommerce Sales Timers WordPress plugin that allows for Cross-Site Request Forgery.
What is the severity of CVE-2021-34636?
CVE-2021-34636 has a severity rating of 8.8 (high).
How does CVE-2021-34636 work?
CVE-2021-34636 is exploitable when the save_theme function in the /includes/admin/coundown_theme_page.php file does not include a nonce check, allowing attackers to inject arbitrary web scripts via Cross-Site Request Forgery.
Which versions of the Countdown and CountUp WooCommerce Sales Timers plugin are affected by CVE-2021-34636?
Versions up to and including 1.5.7 of the Countdown and CountUp WooCommerce Sales Timers plugin are affected by CVE-2021-34636.
How can I fix CVE-2021-34636?
To fix CVE-2021-34636, update the Countdown and CountUp WooCommerce Sales Timers plugin to a version that includes a fix for the vulnerability.