CVE-2026-111033
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Nov 14, 2026
Vendor
unknown
Description
The Countdown, Coming Soon, Maintenance WordPress plugin through 3.0.8 does not perform authorization or nonce checks when saving countdown data on post save, and its output-sanitization allowlist permits script tags, allowing users with Author-level access and above to store arbitrary web scripts that execute when the affected content is viewed on the front end or in an administrator session.