CVE-2021-25064: Wow-Company Wow Countdowns

High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days.

The Wow Countdowns WordPress plugin through 3.1.2 does not sanitize user input into the 'did' parameter and uses it in a SQL statement, leading to an authenticated SQL Injection.

Affected products

• Wow-Company Wow Countdowns: up to and including 3.1.2

Published 2022-03-28. Last modified 2026-06-17.