Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: CoolHappy Clear all filters
TI-2025-42791 CVE-2025-69348 · GHSA-v79h-6pj8-wjm2

WordPress The Events Calendar Countdown Addon plugin <= 1.4.15 - Broken Access Control vulnerability

Priority LOW 19

Missing Authorization vulnerability in CoolHappy The Events Calendar Countdown Addon countdown-for-the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00181 Published 2026-01-06 No fix listed CWE-862
TI-2025-31359 CVE-2025-49311 · GHSA-6m24-69jj-qmwg

WordPress The Events Calendar Countdown Addon plugin <= 1.4.9 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CoolHappy The Events Calendar Countdown Addon countdown-for-the-events-calendar allows Stored XSS.This issue affects T…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00269 Published 2025-06-06 No fix listed CWE-79
TI-2025-23586 CVE-2025-32521 · GHSA-7pc3-w35j-gvgq

WordPress Cool Flipbox plugin <= 1.8.3 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CoolHappy Cool Flipbox – Shortcode & Gutenberg Block flip-boxes allows Reflected XSS.This issue affects Cool Flipbox –…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-17 No fix listed CWE-79