Coolplugins vulnerabilities

Products

• Cryptocurrency Widgets 5
• Cool Timeline 2
• Cryptocurrency Widgets For Elementor 2
• Events Shortcodes For The Events Calendar 2
• Process Steps Template Designer 2

Newest

• coolplugins cool formkit lite – advanced form builder for elementor Cool FormKit Lite <= 2.7.9 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Form Field custom_id Parameter CVE-2026-118500 6.4 MediumOctober 30, 2026
• coolplugins coins marketcap WordPress Coins MarketCap plugin <= 5.5.8 - Cross Site Scripting (XSS) vulnerability CVE-2024-56257 6.5 MediumJanuary 2, 2025
• cool plugins cryptocurrency widgets – price ticker & coins list, coolplugins cryptocurrency widgets +1 more WordPress Cryptocurrency Widgets – Price Ticker & Coins List plugin <= 2.6.2 - Broken Access Control vulnerability CVE-2023-36681 5.3 MediumDecember 13, 2024
• cool plugins cryptocurrency widgets for elementor WordPress Cryptocurrency Widgets For Elementor plugin <= 1.6.4 - Local File Inclusion vulnerability CVE-2024-53739 8.1 HighNovember 30, 2024
• cool plugins web stories widgets for elementor WordPress Web Stories Widgets For Elementor plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-52354 6.5 MediumNovember 11, 2024
• cool plugins cryptocurrency widgets – price ticker & coins list, coolplugins cryptocurrency widgets +1 more WordPress Cryptocurrency Widgets plugin <= 2.8.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-43304 7.1 HighAugust 18, 2024
• cool plugins cryptocurrency widgets – price ticker & coins list, coolplugins cryptocurrency widgets +1 more WordPress Cryptocurrency Widgets – Price Ticker & Coins List Plugin <= 2.6.8 is vulnerable to Broken Access Control CVE-2024-27953 4.7 MediumMarch 13, 2024
• coolplugins timeline widget for elementor, narinder-singh timeline widget for elementor (elementor timeline, vertical & horizontal timeline) +1 more Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline) <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-0977 4.4 MediumFebruary 7, 2024
• cool plugins cryptocurrency widgets – price ticker & coins list, coolplugins cryptocurrency widgets +1 more The Cryptocurrency Widgets – Price Ticker & Coins List plugin for WordPress is vulnerable to SQL... CVE-2024-0709 9.8 CriticalFebruary 5, 2024
• cool plugins events shortcodes for the events calendar WordPress Events Shortcodes & Templates For The Events Calendar Plugin <= 2.3.1 is vulnerable to SQL Injection CVE-2023-52142 7.6 HighJanuary 8, 2024
• coolplugins process steps template designer Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery Bypass CVE-2021-4413 4.3 MediumJuly 12, 2023
• coolplugins cool timeline, narinder-singh cool timeline (horizontal & vertical timeline) +1 more Cool Timeline (Horizontal & Vertical Timeline) <= 2.0.2 - Cross-Site Request Forgery Bypass CVE-2020-36738 4.3 MediumJuly 1, 2023
• adastracrypto cryptocurrency donation box – bitcoin & crypto donations, cool plugins cryptocurrency widgets for elementor, cryptocurrency widgets – price ticker & coins list +13 more +15 more Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation CVE-2022-4950 8.8 HighJune 7, 2023
• coolplugins process steps template designer Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery CVE-2021-4349 8.8 HighJune 7, 2023