Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Cool Plugins Component: Events Shortcodes For The Events Calendar Clear all filters
TI-2023-28579 CVE-2023-52142 · GHSA-qmm7-7fgh-3877

WordPress Events Shortcodes & Templates For The Events Calendar Plugin <= 2.3.1 is vulnerable to SQL Injection

Priority MEDIUM 41

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cool Plugins Events Shortcodes For The Events Calendar.This issue affects Events Shortcodes For The Events Calendar: f…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00539 Published 2024-01-08 No fix listed CWE-89
TI-2022-04540 CVE-2022-4950 · GHSA-pwf8-fhfw-qvgq

Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation

Priority MEDIUM 43

Several WordPress plugins developed by Cool Plugins are vulnerable to arbitrary plugin installation and activation that can lead to remote code execution by authenticated attackers with minimal permissions, such as a sub…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01366 Published 2023-06-07 Fixed in 1.3 CWE-862