Blocksera Cryptocurrency Widgets Pack vulnerabilities
3 vulnerabilities
Known vulnerabilities in Blocksera Cryptocurrency Widgets Pack, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2025-31539blocksera · cryptocurrency_widgets_pack +1 moreWordPress Cryptocurrency Widgets Pack plugin <= 2.0.1 - Broken Access Control vulnerabilityMissing Authorization vulnerability in Blocksera Cryptocurrency Widgets Pack cryptocurrency-widgets-pack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cryptocurrency Widgets Pack: from n/a through <= 2.0.1.EPSS0.38%CriticalCVE-2022-4059blocksera · cryptocurrency_widgets_pack +2 moreCryptocurrency Widgets Pack < 2.0 - Unauthenticated SQLiThe Cryptocurrency Widgets Pack WordPress plugin before 2.0 does not sanitise and escape some parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.EPSS4.84%CriticalCVE-2022-44588blocksera · cryptocurrency_widgets_pack +1 moreWordPress Cryptocurrency Widgets Pack Plugin <=1.8.1 is vulnerable to SQL InjectionUnauth. SQL Injection vulnerability in Cryptocurrency Widgets Pack Plugin <=1.8.1 on WordPress.EPSS2.45%