Vendor

    Cool Plugins

    14 known vulnerabilities in products by Cool Plugins, 0 of them actively exploited (CISA KEV).

    Key figures

    14

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Cool Plugins
    HighCVE-2022-4950

    Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation

    also in 1 other product

    		8.8
    CriticalCVE-2024-0709

    Narinder-singh Cryptocurrency Widgets: SQL Injection

    also in 1 other product

    		9.8
    CriticalCVE-2024-53739

    WordPress Cryptocurrency Widgets For Elementor plugin <= 1.6.4 - Local File Inclusion vulnerability

    also in 1 other product

    		8.1
    HighCVE-2021-4349

    Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery

    also in 1 other product

    		8.8
    CriticalCVE-2023-36681

    Cool Plugins Cryptocurrency Widgets: Missing Authorization

    also in 1 other product

    		5.3
    MediumCVE-2026-118500

    Cool FormKit Lite: Cross-site Scripting

    		6.4
    HighCVE-2023-52142

    Cool Plugins Events Shortcodes For The Events Calendar: SQL Injection

    also in 1 other product

    		7.6
    HighCVE-2024-43304

    Cool Plugins Cryptocurrency Widgets: Cross-site Scripting

    also in 1 other product

    		7.1
    MediumCVE-2024-52354

    WordPress Web Stories Widgets For Elementor plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2024-56257

    WordPress Coins MarketCap plugin <= 5.5.8 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2020-36738

    Cool Timeline (Horizontal & Vertical Timeline) <= 2.0.2 - Cross-Site Request Forgery Bypass

    also in 1 other product

    		4.3
    MediumCVE-2024-27953

    Cool Plugins Cryptocurrency Widgets: Missing Authorization

    also in 1 other product

    		4.7
    MediumCVE-2021-4413

    Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery Bypass

    also in 1 other product

    		4.3
    MediumCVE-2024-0977

    CoolPlugins Timeline Widget For Elementor: Cross-site Scripting

    also in 1 other product

    		4.4

    Products

    Products by Cool Plugins
    Cool Plugins Cryptocurrency Widgets50
    Cryptocurrency Widgets For Elementor30