PatchTheCVEcounter box vulnerabilities and fixes
Recent CVEs affecting counter box, with upgrade or downgrade steps. 3 tracked.
Also searched as: counterbox.
counter box has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2025-03-01. Highest priority: CVE-2024-3481 (score 28/100).
- CVE-2025-24715 MEDIUM 5.4 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Counter Box counter-box allows Cross Site Reque
- CVE-2024-3481 MEDIUM 5.2 UPGRADE The Counter Box WordPress plugin before 1.2.4 does not have CSRF checks in some bulk actions, which could all
- CVE-2024-13901 MEDIUM 4.4 UPGRADE The Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site plugin for WordPress is vul
FAQ
How do I fix counter box vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is counter box being exploited right now?
None of the tracked counter box CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which counter box CVE should I patch first?
CVE-2024-3481 currently ranks highest (28/100): The Counter Box WordPress plugin before 1.2.4 does not have CSRF checks in some bulk actions, which could all.