Export limit exceeded: 15558 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-53739

WordPress Cryptocurrency Widgets For Elementor plugin <= 1.6.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Cool Plugins Cryptocurrency Widgets For Elementor cryptocurrency-widgets-for-elementor allows PHP Local File Inclusion.This issue affects Cryptocurrency Widgets For Elementor: from n/a through <= 1.6.4.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Coolplugins
Products
Cryptocurrency Widgets For Elementor
CVE-2022-4950

Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation

Several WordPress plugins developed by Cool Plugins are vulnerable to arbitrary plugin installation and activation that can lead to remote code execution by authenticated attackers with minimal permissions, such as a subscriber.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Coolplugins Cryptocurrency Payment \& Donation Box Plugins
Products
Cool Timeline Cryptocurrency Widgets Cryptocurrency Widgets For Elementor and 7 more