Product Time Countdown for WooCommerce Security & Risk Analysis

wordpress.org/plugins/product-countdown-for-woocommerce

Add live time counter to any WooCommerce product.

500 active installs v1.6.5 PHP 8.0+ WP 4.8+ Updated Dec 19, 2025
countdown-plugin-for-woocommerceproduct-countdownproduct-time-countdowntime-countdown-plugintime-counter
77
B · Generally Safe
CVEs total2
Unpatched1
Last CVESep 22, 2025
Safety Verdict

Is Product Time Countdown for WooCommerce Safe to Use in 2026?

Mostly Safe

Score 77/100

Product Time Countdown for WooCommerce is generally safe to use. 2 past CVEs were resolved. Keep it updated.

2 known CVEs 1 unpatched Last CVE: Sep 22, 2025Updated 3mo ago
Risk Assessment

The "product-countdown-for-woocommerce" plugin version 1.6.5 exhibits a mixed security posture. While it demonstrates good practices by exclusively using prepared statements for SQL queries, employing nonce checks on all identified entry points, and performing capability checks for its AJAX handlers, there are areas of concern. The static analysis reveals that a significant portion (53%) of output escaping is not properly handled, increasing the risk of Cross-Site Scripting (XSS) vulnerabilities. The vulnerability history is also a notable concern, with two known medium-severity CVEs, one of which remains unpatched. The common vulnerability type being XSS further reinforces the risk indicated by the insufficient output escaping.

Key Concerns

  • Unpatched CVEs
  • Medium severity CVEs
  • Significant unescaped output
Vulnerabilities
2

Product Time Countdown for WooCommerce Security Vulnerabilities

CVEs by Year

2 CVEs in 2025 · unpatched
2025
Patched Has unpatched

Severity Breakdown

Medium
2

2 total CVEs

CVE-2025-57908medium · 5.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Product Time Countdown for WooCommerce <= 1.6.4 - Authenticated (Shop manager+) Stored Cross-Site Scripting

Sep 22, 2025Unpatched
CVE-2025-47505medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Product Time Countdown for WooCommerce <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

May 7, 2025 Patched in 1.6.3 (7d)
Code Analysis
Analyzed Mar 16, 2026

Product Time Countdown for WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
2 prepared
Unescaped Output
16
14 escaped
Nonce Checks
3
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared2 total queries

Output Escaping

47% escaped30 total outputs
Attack Surface

Product Time Countdown for WooCommerce Attack Surface

Entry Points5
Unprotected0

AJAX Handlers 2

authwp_ajax_prowc_product_countdownincludes\class-prowc-product-countdown-core.php:43
noprivwp_ajax_prowc_product_countdownincludes\class-prowc-product-countdown-core.php:44

Shortcodes 3

[product_time_counter] includes\class-prowc-product-countdown-core.php:85
[product_time_counter_enddate] includes\class-prowc-product-countdown-core.php:87
[prowc_ptc_translate] includes\class-prowc-product-countdown-core.php:96
WordPress Hooks 29
actionwp_enqueue_scriptsincludes\class-prowc-product-countdown-core.php:40
filterwoocommerce_is_purchasableincludes\class-prowc-product-countdown-core.php:58
filterwoocommerce_product_is_visibleincludes\class-prowc-product-countdown-core.php:61
actionpre_get_postsincludes\class-prowc-product-countdown-core.php:64
filterwoocommerce_variation_prices_priceincludes\class-prowc-product-countdown-core.php:72
filterwoocommerce_variation_prices_sale_priceincludes\class-prowc-product-countdown-core.php:73
filterwoocommerce_get_variation_prices_hashincludes\class-prowc-product-countdown-core.php:74
filterwoocommerce_product_variation_get_priceincludes\class-prowc-product-countdown-core.php:76
filterwoocommerce_product_variation_get_sale_priceincludes\class-prowc-product-countdown-core.php:77
filterwoocommerce_product_is_in_stockincludes\class-prowc-product-countdown-core.php:81
filtermanage_edit-product_columnsincludes\class-prowc-product-countdown-core.php:91
actionmanage_product_posts_custom_columnincludes\class-prowc-product-countdown-core.php:92
actionpre_get_postsincludes\class-prowc-product-countdown-core.php:293
actionadd_meta_boxesincludes\settings\class-prowc-product-countdown-metaboxes.php:23
actionsave_post_productincludes\settings\class-prowc-product-countdown-metaboxes.php:24
filterwoocommerce_get_sections_prowc_product_countdownincludes\settings\class-prowc-product-countdown-settings-section.php:24
filterwoocommerce_admin_settings_sanitize_optionincludes\settings\class-prowc-settings-product-countdown.php:26
actionadmin_noticesincludes\settings\class-prowc-settings-product-countdown.php:84
filterwoocommerce_get_settings_pagesproduct-countdown-for-woocommerce.php:126
actionadmin_initproduct-countdown-for-woocommerce.php:132
actionadmin_enqueue_scriptsproduct-countdown-for-woocommerce.php:134
actionadmin_initproduct-countdown-for-woocommerce.php:135
actionadmin_initproduct-countdown-for-woocommerce.php:136
actionadmin_initproduct-countdown-for-woocommerce.php:137
actionadmin_noticesproduct-countdown-for-woocommerce.php:138
actionadmin_noticesproduct-countdown-for-woocommerce.php:139
actionplugins_loadedproduct-countdown-for-woocommerce.php:140
actionadmin_noticesproduct-countdown-for-woocommerce.php:145
actionbefore_woocommerce_initproduct-countdown-for-woocommerce.php:496
Maintenance & Trust

Product Time Countdown for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 19, 2025
PHP min version8.0
Downloads28K

Community Trust

Rating100/100
Number of ratings7
Active installs500
Developer Profile

Product Time Countdown for WooCommerce Developer Profile

ProWCPlugins

3 plugins · 2K total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
22 days
View full developer profile
Detection Fingerprints

How We Detect Product Time Countdown for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/product-countdown-for-woocommerce/assets/js/prowc_product_countdown_admin.js/wp-content/plugins/product-countdown-for-woocommerce/assets/css/prowc_product_countdown_admin.css/wp-content/plugins/product-countdown-for-woocommerce/assets/js/prowc_product_countdown_public.js
Version Parameters
/wp-content/plugins/product-countdown-for-woocommerce/assets/js/prowc_product_countdown_admin.js?ver=/wp-content/plugins/product-countdown-for-woocommerce/assets/css/prowc_product_countdown_admin.css?ver=/wp-content/plugins/product-countdown-for-woocommerce/assets/js/prowc_product_countdown_public.js?ver=

HTML / DOM Fingerprints

CSS Classes
prowc-product-countdown-noticeprowc_product_countdown_admin_style
HTML Comments
<!-- This site is using Product Time Countdown for WooCommerce --><!-- Main ProWC_Product_Countdown Class --><!-- Product Time Countdown for WooCommerce -->
Data Attributes
data-product-iddata-countdown-id
JS Globals
prowc_product_countdown_params
Shortcode Output
[product_countdown]
FAQ

Frequently Asked Questions about Product Time Countdown for WooCommerce