CoolPlugins
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Coins MarketCap | 1 | – | Jan 2, 2025 |
| Cool FormKit Lite – Advanced Form Builder for Elementor | 1 | – | Oct 30, 2026 |
| Cryptocurrency Widgets For Elementor | 1 | – | Jun 7, 2023 |
| Events Widgets For Elementor And The Events Calendar | 1 | – | Jun 7, 2023 |
Exploited and recent CVEs
- CVE-2026-118500 Cool FormKit Lite <= 2.7.9 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Form Field custom_id Parameter 0.2%
- CVE-2024-56257 WordPress Coins MarketCap plugin <= 5.5.8 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2022-4950 Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation 1.4%
- CVE-2022-4950 Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation 1.4%