HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce

Information

Software Type Plugin
Software Slug hurrytimer (view on wordpress.org)
Software Status Active
Software Author nlemsieh
Software Website hurrytimer.com
Software Downloads 513,028
Software Active Installs 20,000
Software Record Last Updated July 11, 2026

5 Vulnerabilities

Submit a Vulnerability
HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce <= 2.14.2 - Authenticated (Author+) Stored Cross-Site Scripting
6.4
CVE-2026-24392
Jan 11, 2026
Researcher: benzdeus
HurryTimer <= 2.13.1 - Missing Authorization
5.3
CVE-2025-53255
Jun 27, 2025
Researcher: ch4r0n
HurryTimer <= 2.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Campaign Name
6.4
CVE-2024-13735
Feb 13, 2025
Researcher: zer0gh0st
HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce <= 2.10.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Publication
4.3
CVE-2024-8667
Oct 23, 2024
Researcher: Webbernaut
HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce <= 2.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-32556
Apr 16, 2024
Researcher: Joshua Chan
Title Status CVE ID CVSS Researchers Date
HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce <= 2.14.2 - Authenticated (Author+) Stored Cross-Site Scripting Patched CVE-2026-24392 6.4 benzdeus January 11, 2026
HurryTimer <= 2.13.1 - Missing Authorization Patched CVE-2025-53255 5.3 ch4r0n June 27, 2025
HurryTimer <= 2.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Campaign Name Patched CVE-2024-13735 6.4 zer0gh0st February 13, 2025
HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce <= 2.10.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Publication Patched CVE-2024-8667 4.3 Webbernaut October 23, 2024
HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce <= 2.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-32556 6.4 Joshua Chan April 16, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation