Cool Plugins
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Cryptocurrency Widgets – Price Ticker & Coins List | 3 | – | Dec 13, 2024 |
| Cool Formkit Lite | 1 | – | Sep 30, 2026 |
| AI Translation for Polylang | 1 | – | Oct 9, 2026 |
| Elementor Contact Form DB | 1 | – | Feb 19, 2026 |
| Events Shortcodes For The Events Calendar | 1 | – | Jan 8, 2024 |
| Web Stories Widgets For Elementor | 1 | – | Nov 11, 2024 |
| Cryptocurrency Widgets For Elementor | 1 | – | Nov 30, 2024 |
Exploited and recent CVEs
- CVE-2026-107419 WordPress AI Translation for Polylang plugin <= 1.6.2 - Broken Access Control vulnerability 0.2%
- CVE-2026-97301 WordPress Cool Formkit Lite plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-25320 WordPress Elementor Contact Form DB plugin <= 2.1.3 - Broken Access Control vulnerability 0.3%
- CVE-2023-36681 WordPress Cryptocurrency Widgets – Price Ticker & Coins List plugin <= 2.6.2 - Broken Access Control vulnerability 0.9%
- CVE-2024-53739 WordPress Cryptocurrency Widgets For Elementor plugin <= 1.6.4 - Local File Inclusion vulnerability 0.7%
- CVE-2024-52354 WordPress Web Stories Widgets For Elementor plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-43304 WordPress Cryptocurrency Widgets plugin <= 2.8.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-27953 WordPress Cryptocurrency Widgets – Price Ticker & Coins List Plugin <= 2.6.8 is vulnerable to Broken Access Control 0.4%
- CVE-2023-52142 WordPress Events Shortcodes & Templates For The Events Calendar Plugin <= 2.3.1 is vulnerable to SQL Injection 0.5%