Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Cool Plugins Component: Cryptocurrency Widgets For Elementor Clear all filters
TI-2024-35937 CVE-2024-53739 · GHSA-f9x6-g3qw-c7c4

WordPress Cryptocurrency Widgets For Elementor plugin <= 1.6.4 - Local File Inclusion vulnerability

Priority HIGH 76

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Cool Plugins Cryptocurrency Widgets For Elementor cryptocurrency-widgets-for-elementor allows PHP L…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0066 Published 2024-11-30 No fix listed CWE-98
TI-2022-04540 CVE-2022-4950 · GHSA-pwf8-fhfw-qvgq

Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation

Priority MEDIUM 43

Several WordPress plugins developed by Cool Plugins are vulnerable to arbitrary plugin installation and activation that can lead to remote code execution by authenticated attackers with minimal permissions, such as a sub…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01366 Published 2023-06-07 Fixed in 1.3 CWE-862