Activity Track vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Activity Track products: 1 record(s), with severity, exploitation and fixes.

Uji Countdown 1

Exploited only (KEV) →

CVE-2025-52749 High · 7.1 CWE-79 Oct 22, 2025

WordPress Uji Countdown plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Activity Track Uji Countdown uji-countdown allows Reflected XSS.This issue affects Uji Countdown: from n/a through <= 2.3.3.