Narinder Singh

Products

Exploited and recent CVEs

  • CVE-2026-107420 Medium 5.3 WordPress Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway plugin <= 1.7.2 - Bypass Vulnerability vulnerability 0.1%
  • CVE-2024-0977 Medium 4.4 Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline) <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-0709 Critical 9.8 The Cryptocurrency Widgets – Price Ticker & Coins List plugin for WordPress is vulnerable to SQL Injection via the 'coinslist' parameter in versions 2.0 to 2.6.5 due to insufficient escaping on the us 0.9%
  • CVE-2021-4413 Medium 4.3 Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery Bypass 0.4%
  • CVE-2020-36738 Medium 4.3 Cool Timeline (Horizontal & Vertical Timeline) <= 2.0.2 - Cross-Site Request Forgery Bypass 0.5%
  • CVE-2022-4950 High 8.8 Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation 1.4%
  • CVE-2022-4950 High 8.8 Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation 1.4%
  • CVE-2022-4950 High 8.8 Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation 1.4%
  • CVE-2022-4950 High 8.8 Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation 1.4%
  • CVE-2022-4950 High 8.8 Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation 1.4%
  • CVE-2022-4950 High 8.8 Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation 1.4%
  • CVE-2022-4950 High 8.8 Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation 1.4%
  • CVE-2021-4349 High 8.8 Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery 0.6%