Unknown Coolclock vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Coolclock, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.8CVE-2026-83545unknowncoolclock+1
EPSS score
0.43%
The CoolClock WordPress plugin before 4.3.8 does not properly escape a custom skin setting before outputting it inside an inline script, allowing users with contributor-level access and above to inject arbitrary JavaScript that executes when the content is viewed.6.8CVE-2026-83546unknowncoolclock+1
EPSS score
0.43%
The CoolClock WordPress plugin before 4.3.8 does not properly escape a skin setting before outputting it within an HTML attribute, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when the content is viewed.