< 2.0.7
2.0.7
The uji-countdown plugin before 2.0.7 for WordPress has XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.