Flickdevs - vulnerabilities (CVEs)

4 CVEs in 4 products, 0 in the last 30 days, newest from 2025-05-15.

Products

• Countdown Timer For Elementor - 1 CVEs
• Countdown Timer For Wordpress Block Editor - 1 CVEs
• Elementor Button Plus - 1 CVEs
• Elementor Imagebox - 1 CVEs

Newest CVEs of Flickdevs

• CVE-2024-10631 - CVSS 6.5 (medium), 2025-05-15: The Countdown Timer for WordPress Block Editor WordPress plugin through 1.0.5 does not validate and escape some of its block options before outputting them…
• CVE-2024-13113 - CVSS 5.9 (medium), 2025-02-26: The Countdown Timer for Elementor WordPress plugin before 1.3.7 does not sanitise and escape some parameters when outputting them on the page, which could…
• CVE-2024-53746 - CVSS 6.5 (medium), 2024-12-01: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FlickDevs Elementor Button Plus fd-elementor-button-plus…
• CVE-2024-3074 - CVSS 6.4 (medium), 2024-05-02: The Elementor ImageBox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image box widget in all versions up to, and including, 1.2.8…