CVE-2026-111033
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 3.0.8 - Author+ Stored XSS via savePost
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Countdown, Coming Soon, Maintenance WordPress plugin through 3.0.8 does not perform authorization or nonce checks when saving countdown data on post save, and its output-sanitization allowlist permits script tags, allowing users with Author-level access and above to store arbitrary web scripts that execute when the affected content is viewed on the front end or in an administrator session.
| Vendor | unknown |
| Product | countdown, coming soon, maintenance |
| Published | Nov 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown countdown, coming soon, maintenance
Be the first to know when new unknown vulnerabilities affecting unknown countdown, coming soon, maintenance are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Countdown, Coming Soon, Maintenance
0 ≤ 3.0.8
References
Credits
Huseyn WPScan