Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2021-09-27	CVE-2021-24633	Missing Authorization vulnerability in Wpdeveloper Countdown Block The Countdown Block WordPress plugin before 1.1.2 does not have authorisation in the eb_write_block_css AJAX action, which allows any authenticated user, such as Subscriber, to modify post contents displayed to users. network low complexity wpdeveloper CWE-862	4.0

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.