Vulnerabilities in Cool Plugins
9 resultsCVE-2023-36681MEDIUMWordPress Cryptocurrency Widgets – Price Ticker & Coins List plugin <= 2.6.2 - Broken Access Control vulnerabilityEPSS 0.9%CVE-2024-53739HIGHWordPress Cryptocurrency Widgets For Elementor plugin <= 1.6.4 - Local File Inclusion vulnerabilityEPSS 0.7%CVE-2023-52142HIGHWordPress Events Shortcodes & Templates For The Events Calendar Plugin <= 2.3.1 is vulnerable to SQL InjectionEPSS 0.5%CVE-2024-27953MEDIUMWordPress Cryptocurrency Widgets – Price Ticker & Coins List Plugin <= 2.6.8 is vulnerable to Broken Access ControlEPSS 0.4%CVE-2024-43304HIGHWordPress Cryptocurrency Widgets plugin <= 2.8.0 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-25320MEDIUMWordPress Elementor Contact Form DB plugin <= 2.1.3 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-52354MEDIUMWordPress Web Stories Widgets For Elementor plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-107419MEDIUMWordPress AI Translation for Polylang plugin <= 1.6.2 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-97301MEDIUMWordPress Cool Formkit Lite plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%