CoolPlugins vulnerabilities
We track 4 vulnerabilities in CoolPlugins products across 7 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on December 13, 2024.
Latest CoolPlugins vulnerabilities
- 9.8 Critical severity
Cryptocurrency Widgets – Price Ticker & Coins…: Missing Authorization
Missing Authorization vulnerability in Cool Plugins Cryptocurrency Widgets – Price Ticker & Coins List allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cryptocurrency Widgets – Price Ticker & Coins List: from n/a throu
- 9.8 Critical severity
Cryptocurrency Widgets For Elementor: Use of Incorrectly-Resolved Name or Reference
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Cool Plugins Cryptocurrency Widgets For Elementor cryptocurrency-widgets-for-elementor allows PHP Local File Inclusion.This issue affects C
- 7.5 High severity
Cryptocurrency Widgets – Price Ticker & Coins…: Improper Neutralization of Special Elements used in an SQL Command
The Cryptocurrency Widgets – Price Ticker & Coins List plugin for WordPress is vulnerable to SQL Injection via the 'coinslist' parameter in versions 2.0 to 2.6.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on
- 8.8 High severity
The Events Calendar Events Notification Bar…: Missing Authorization
Several WordPress plugins developed by Cool Plugins are vulnerable to arbitrary plugin installation and activation that can lead to remote code execution by authenticated attackers with minimal permissions, such as a subscriber.