Cryptocurrency Widgets vulnerabilities
3 known vulnerabilities in Cryptocurrency Widgets from CoolPlugins. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Cryptocurrency Widgets – Price Ticker & Coins…: Missing Authorization
Missing Authorization vulnerability in Cool Plugins Cryptocurrency Widgets – Price Ticker & Coins List allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cryptocurrency Widgets – Price Ticker & Coins List: from n/a throu
- 7.5 High severity
Cryptocurrency Widgets – Price Ticker & Coins…: Improper Neutralization of Special Elements used in an SQL Command
The Cryptocurrency Widgets – Price Ticker & Coins List plugin for WordPress is vulnerable to SQL Injection via the 'coinslist' parameter in versions 2.0 to 2.6.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on
- 8.8 High severity
The Events Calendar Events Notification Bar…: Missing Authorization
Several WordPress plugins developed by Cool Plugins are vulnerable to arbitrary plugin installation and activation that can lead to remote code execution by authenticated attackers with minimal permissions, such as a subscriber.