CVE-2025-12668 | WP Count Down Timer Plugin up to 1.0.1 on WordPress Shortcode wp_countdown_timer cross site scripting

November 10, 2025 Yanac

A vulnerability has been found in WP Count Down Timer Plugin up to 1.0.1 on WordPress and classified as problematic. The affected element is the function wp_countdown_timer of the component Shortcode Handler. The manipulation leads to cross site scripting.

This vulnerability is listed as CVE-2025-12668. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More