Cool Plugins
9 CVEs across 7 Cool Plugins products. Browse Cool Plugins vulnerabilities, severities, and proof-of-concept exploits.
Cool Plugins products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-107419 | Medium | 5.4 | 2026-10-09 | Missing Authorization vulnerability in Cool Plugins AI Translation for Polylang automatic-translations-for-polylang allows Exploiting Incorrectly Configured Ac… |
CVE-2026-97301 | Medium | 6.5 | 2026-09-30 | Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <= 2.7.8 versions. |
CVE-2026-25320 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in Cool Plugins Elementor Contact Form DB sb-elementor-contact-form-db allows Exploiting Incorrectly Configured Access Cont… |
CVE-2023-36681 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in Cool Plugins Cryptocurrency Widgets – Price Ticker & Coins List allows Exploiting Incorrectly Configured Access Control… |
CVE-2024-53739 | High | 8.1 | 2024-11-30 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Cool Plugins Cryptocurrency Widgets Fo… |
CVE-2024-52354 | Medium | 6.5 | 2024-11-11 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cool Plugins Web Stories Widgets For Elementor shortcodes… |
CVE-2024-43304 | High | 7.1 | 2024-08-18 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Cool Plugins Cryptocurrency Widgets – Price Ticker… |
CVE-2024-27953 | Medium | 4.7 | 2024-03-13 | Missing Authorization vulnerability in Cool Plugins Cryptocurrency Widgets – Price Ticker & Coins List.This issue affects Cryptocurrency Widgets – Price Ticker… |
CVE-2023-52142 | High | 7.6 | 2024-01-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cool Plugins Events Shortcodes For The Events Calendar.Th… |