Cool Plugins vulnerabilities
9 vulnerabilities
Known vulnerabilities in Cool Plugins products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 7 products.
Products
7- Cryptocurrency Widgets – Price Ticker & Coins List3 vulnerabilities
- AI Translation For Polylang1 vulnerabilities
- Cool Formkit Lite1 vulnerabilities
- Cryptocurrency Widgets For Elementor1 vulnerabilities
- Elementor Contact Form DB1 vulnerabilities
- Events Shortcodes For The Events Calendar1 vulnerabilities
- Web Stories Widgets For Elementor1 vulnerabilities
CVE-2024-52354cool pluginsweb stories widgets for elementor+2
EPSS score0.28%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cool Plugins Web Stories Widgets For Elementor shortcodes-for-amp-web-stories-and-elementor-widget allows Stored XSS.This issue affects Web Stories Widgets For Elementor: from n/a through <= 1.1.CVE-2024-43304cool pluginscryptocurrency widgets – price ticker & coins list+2EPSS score0.31%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Cool Plugins Cryptocurrency Widgets – Price Ticker & Coins List allows Reflected XSS.This issue affects Cryptocurrency Widgets – Price Ticker & Coins List: from n/a through 2.8.0.CVE-2024-53739cool pluginscryptocurrency widgets for elementor+2EPSS score0.66%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Cool Plugins Cryptocurrency Widgets For Elementor cryptocurrency-widgets-for-elementor allows PHP Local File Inclusion.This issue affects Cryptocurrency Widgets For Elementor: from n/a through <= 1.6.4.CVE-2024-27953cool pluginscryptocurrency widgets – price ticker & coins list+2EPSS score0.40%
Missing Authorization vulnerability in Cool Plugins Cryptocurrency Widgets – Price Ticker & Coins List.This issue affects Cryptocurrency Widgets – Price Ticker & Coins List: from n/a through 2.6.8.CVE-2026-25320cool pluginselementor contact form db+1EPSS score0.31%
Missing Authorization vulnerability in Cool Plugins Elementor Contact Form DB sb-elementor-contact-form-db allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Contact Form DB: from n/a through <= 2.1.3.CVE-2026-107419cool pluginsai translation for polylang+1EPSS score0.17%
Missing Authorization vulnerability in Cool Plugins AI Translation for Polylang automatic-translations-for-polylang allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Translation for Polylang: from n/a through 1.6.2.CVE-2026-97301cool pluginscool formkit lite+1EPSS score0.17%
Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <= 2.7.8 versions.CVE-2023-52142cool pluginsevents shortcodes for the events calendar+2EPSS score0.54%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cool Plugins Events Shortcodes For The Events Calendar.This issue affects Events Shortcodes For The Events Calendar: from n/a through 2.3.1.CVE-2023-36681cool pluginscryptocurrency widgets – price ticker & coins list+2EPSS score0.93%
Missing Authorization vulnerability in Cool Plugins Cryptocurrency Widgets – Price Ticker & Coins List allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cryptocurrency Widgets – Price Ticker & Coins List: from n/a through 2.6.2.