Coolplugins
5 CVEs across 15 Coolplugins products. Browse Coolplugins vulnerabilities, severities, and proof-of-concept exploits.
Coolplugins products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-56257 | Medium | 6.5 | 2025-01-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CoolPlugins Coins MarketCap coins-marketcap allows DOM-Ba… |
CVE-2023-36681 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in Cool Plugins Cryptocurrency Widgets – Price Ticker & Coins List allows Exploiting Incorrectly Configured Access Control… |
CVE-2024-53739 | High | 8.1 | 2024-11-30 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Cool Plugins Cryptocurrency Widgets Fo… |
CVE-2024-52354 | Medium | 6.5 | 2024-11-11 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cool Plugins Web Stories Widgets For Elementor shortcodes… |
CVE-2024-43304 | High | 7.1 | 2024-08-18 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Cool Plugins Cryptocurrency Widgets – Price Ticker… |
CVE-2024-27953 | Medium | 4.7 | 2024-03-13 | Missing Authorization vulnerability in Cool Plugins Cryptocurrency Widgets – Price Ticker & Coins List.This issue affects Cryptocurrency Widgets – Price Ticker… |
CVE-2024-0977 | Medium | 4.4 | 2024-02-07 | The Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via im… |
CVE-2024-0709 | Critical | 9.8 | 2024-02-05 | The Cryptocurrency Widgets – Price Ticker & Coins List plugin for WordPress is vulnerable to SQL Injection via the 'coinslist' parameter in versions 2.0 to 2.6… |
CVE-2023-52142 | High | 7.6 | 2024-01-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cool Plugins Events Shortcodes For The Events Calendar.Th… |
CVE-2021-4413 | Medium | 4.3 | 2023-07-12 | The Process Steps Template Designer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.1. This is due to mi… |
CVE-2020-36738 | Medium | 4.3 | 2023-07-01 | The Cool Timeline (Horizontal & Vertical Timeline) plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.2. Th… |
CVE-2022-4950 | High | 8.8 | 2023-06-07 | Several WordPress plugins developed by Cool Plugins are vulnerable to arbitrary plugin installation and activation that can lead to remote code execution by au… |
CVE-2021-4349 | High | 8.8 | 2023-06-07 | The Process Steps Template Designer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.1. This makes it pos… |