Narinder Singh Cryptocurrency Widgets – Price Ticker & Coins List

• CVE-2024-0709 Critical 9.8 The Cryptocurrency Widgets – Price Ticker & Coins List plugin for WordPress is vulnerable to SQL Injection via the 'coinslist' parameter in versions 2.0 to 2.6.5 due to insufficient escaping on the us 0.9%
• CVE-2022-4950 High 8.8 Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation 1.4%