Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2023-52142

WordPress Events Shortcodes & Templates For The Events Calendar Plugin <= 2.3.1 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cool Plugins Events Shortcodes For The Events Calendar.This issue affects Events Shortcodes For The Events Calendar: from n/a through 2.3.1.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Coolplugins
Products
Events Shortcodes For The Events Calendar
CVE-2022-4950

Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation

Several WordPress plugins developed by Cool Plugins are vulnerable to arbitrary plugin installation and activation that can lead to remote code execution by authenticated attackers with minimal permissions, such as a subscriber.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Coolplugins Cryptocurrency Payment \& Donation Box Plugins
Products
Cool Timeline Cryptocurrency Widgets Cryptocurrency Widgets For Elementor and 7 more