A vulnerability was found in Countdown Timer Plugin up to 2.7.7 on WordPress. It has been rated as problematic. This vulnerability affects the function wpdevart_countdown of the component Shortcode Handler. Performing a manipulation results in cross site scripting.

This vulnerability is identified as CVE-2025-14555. The attack can be initiated remotely. There is not any exploit available.