Wpdevart Widget Countdown vulnerabilities

• wpdevart countdown timer – widget countdown Countdown Timer – Widget Countdown <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect_url' Shortcode Attribute CVE-2026-16495 6.4 MediumOctober 14, 2026
• wpdevart countdown timer – widget countdown Countdown Timer - Widget Countdown <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2025-14555 6.4 MediumJanuary 10, 2026
• wpdevart widget countdown WordPress Widget Countdown plugin <= 2.7.4 - Cross Site Scripting (XSS) Vulnerability CVE-2025-47443 6.5 MediumMay 7, 2025
• wpdevart widget countdown WordPress Widget Countdown plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-24719 6.5 MediumJanuary 24, 2025