Skip to content
Noroxi

edmonsoft records

8 published records for vendor edmonsoft.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

8 records
  • CVE-2022-29423
    39Monitor

    WordPress Countdown & Clock plugin <= 2.3.2 - Pro Features Lock Bypass vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    edmonsoft · countdown builderMay 6, 2022

  • CVE-2023-3392
    28Monitor

    Read More & Accordion < 3.2.7 - Admin+ PHP Object Injection

    HighCVSS 7.2No exploitEPSS 1%

    edmonsoft · read more \& accordionOct 16, 2023

  • CVE-2022-0601
    24Monitor

    Countdown & Clock < 2.2.9 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 1%

    edmonsoft · countdown\, coming soon\, maintenance - countdown \& clockMar 14, 2022

  • CVE-2022-29421
    24Monitor

    WordPress Countdown & Clock plugin <= 2.3.2 - Reflected Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 1%

    edmonsoft · countdown builderMay 6, 2022

  • CVE-2024-2017
    21Monitor

    Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.7.8 - Missing Authorization to Authenticated (Subscriber+) PHP Object Injection

    MediumCVSS 5.4No exploitEPSS 0%

    edmonsoft · countdown builderJun 5, 2024

  • CVE-2022-29422
    19Monitor

    WordPress Countdown & Clock plugin <= 2.3.2 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

    MediumCVSS 4.8No exploitEPSS 1%

    edmonsoft · countdown builderMay 6, 2022

  • CVE-2022-29420
    19Monitor

    WordPress Countdown & Clock plugin <= 2.3.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 0%

    edmonsoft · countdown builderMay 6, 2022

  • CVE-2024-13639
    17Monitor

    Read More & Accordion <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary 'Read More' Post Deletion

    MediumCVSS 4.3No exploitEPSS 0%

    edmonsoft · read more \& accordionFeb 13, 2025