Cool Plugins - vulnerabilities (CVEs)
9 CVEs in 7 products, 2 in the last 30 days, newest from 2026-10-09.
Products
- Cryptocurrency Widgets Price Ticker Coins List - 3 CVEs
- Ai Translation For Polylang - 1 CVEs
- Cool Formkit Lite - 1 CVEs
- Cryptocurrency Widgets For Elementor - 1 CVEs
- Elementor Contact Form Db - 1 CVEs
- Events Shortcodes For The Events Calendar - 1 CVEs
- Web Stories Widgets For Elementor - 1 CVEs
Newest CVEs of Cool Plugins
- CVE-2026-107419 - CVSS 5.4 (medium), 2026-10-09: Missing Authorization vulnerability in Cool Plugins AI Translation for Polylang automatic-translations-for-polylang allows Exploiting Incorrectly Configured…
- CVE-2026-97301 - CVSS 6.5 (medium), 2026-09-30: Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <= 2.7.8 versions.
- CVE-2026-25320 - CVSS 5.3 (medium), 2026-02-19: Missing Authorization vulnerability in Cool Plugins Elementor Contact Form DB sb-elementor-contact-form-db allows Exploiting Incorrectly Configured Access…
- CVE-2023-36681 - CVSS 9.8 (critical), 2024-12-13: Missing Authorization vulnerability in Cool Plugins Cryptocurrency Widgets – Price Ticker & Coins List allows Exploiting Incorrectly Configured Access Control…
- CVE-2024-53739 - CVSS 9.8 (critical), 2024-11-30: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Cool Plugins Cryptocurrency Widgets…
- CVE-2024-52354 - CVSS 6.5 (medium), 2024-11-11: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cool Plugins Web Stories Widgets For Elementor…
- CVE-2024-43304 - CVSS 7.1 (high), 2024-08-18: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Cool Plugins Cryptocurrency Widgets – Price…
- CVE-2024-27953 - CVSS 4.7 (medium), 2024-03-13: Missing Authorization vulnerability in Cool Plugins Cryptocurrency Widgets – Price Ticker & Coins List.This issue affects Cryptocurrency Widgets – Price…
- CVE-2023-52142 - CVSS 8.8 (high), 2024-01-08: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cool Plugins Events Shortcodes For The Events…
