Narinder Singh
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Process Steps Template Designer | 2 | – | Jul 12, 2023 |
| Cryptocurrency Widgets – Price Ticker & Coins List | 2 | – | Feb 5, 2024 |
| Cool Timeline (Horizontal & Vertical Timeline) | 2 | – | Jul 1, 2023 |
| Events Search For The Events Calendar | 1 | – | Jun 7, 2023 |
| Events Shortcodes For The Events Calendar | 1 | – | Jun 7, 2023 |
| Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway | 1 | – | Oct 10, 2026 |
| The Events Calendar Events Notification Bar Addon | 1 | – | Jun 7, 2023 |
| Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline) | 1 | – | Feb 7, 2024 |
| Event Countdown for The Events Calendar | 1 | – | Jun 7, 2023 |
| Event Single Page Builder For The Events Calendar | 1 | – | Jun 7, 2023 |
Exploited and recent CVEs
- CVE-2026-107420 WordPress Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway plugin <= 1.7.2 - Bypass Vulnerability vulnerability 0.1%
- CVE-2024-0977 Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline) <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
- CVE-2024-0709 The Cryptocurrency Widgets – Price Ticker & Coins List plugin for WordPress is vulnerable to SQL Injection via the 'coinslist' parameter in versions 2.0 to 2.6.5 due to insufficient escaping on the us 0.9%
- CVE-2021-4413 Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery Bypass 0.4%
- CVE-2020-36738 Cool Timeline (Horizontal & Vertical Timeline) <= 2.0.2 - Cross-Site Request Forgery Bypass 0.5%
- CVE-2022-4950 Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation 1.4%
- CVE-2022-4950 Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation 1.4%
- CVE-2022-4950 Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation 1.4%
- CVE-2022-4950 Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation 1.4%
- CVE-2022-4950 Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation 1.4%
- CVE-2022-4950 Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation 1.4%
- CVE-2022-4950 Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation 1.4%
- CVE-2021-4349 Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery 0.6%