WordPress Plugin Countdown Block is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently modify post contents displayed to users. WordPress Plugin Countdown Block version 1.1.1 is vulnerable; prior versions may also be affected.
Update to plugin version 1.1.2 or latest
WordPress Plugin Contextual Related Posts Cross-Site Request Forgery (2.9.3)
WordPress Plugin easyReservations Cross-Site Scripting (5.0.11)
Drupal Core 7.x Cross-Site Scripting (7.0 - 7.69)
WordPress Plugin All-in-One Event Calendar Cross-Site Scripting (2.5.38)