Skip to content
OpenAdvisories

Vendor

Cool Plugins

10 known vulnerabilities.

Products

Cryptocurrency Widgets – Price Ticker & Coins List 3 Cool Formkit Lite 2 AI Translation for Polylang 1 Elementor Contact Form DB 1 Web Stories Widgets For Elementor 1 Cryptocurrency Widgets For Elementor 1 Events Shortcodes For The Events Calendar 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-121777

    WordPress Cool Formkit Lite plugin <= 2.7.10 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Cool Plugins Cool Formkit Lite extensions-for-elementor-form allows Code Injection.This issue affects Cool Formkit Lite: from n/a through 2.7.10.

    Cool Plugins Cool Formkit Lite
  • Medium 5.4
    CVE-2026-107419

    WordPress AI Translation for Polylang plugin <= 1.6.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Cool Plugins AI Translation for Polylang automatic-translations-for-polylang allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Translation for Polylang: from n/a through 1.6.2.

    Cool Plugins AI Translation for Polylang
  • Medium 6.5
    CVE-2026-97301

    WordPress Cool Formkit Lite plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <= 2.7.8 versions.

    Cool Plugins Cool Formkit Lite
  • Medium 5.3
    CVE-2026-25320

    WordPress Elementor Contact Form DB plugin <= 2.1.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Cool Plugins Elementor Contact Form DB sb-elementor-contact-form-db allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Contact Form DB: from n/a through <= 2.1.3.

    Cool Plugins Elementor Contact Form DB
  • Medium 5.3
    CVE-2023-36681

    WordPress Cryptocurrency Widgets – Price Ticker & Coins List plugin <= 2.6.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Cool Plugins Cryptocurrency Widgets – Price Ticker & Coins List allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cryptocurrency Widgets – Price Ticker & Coins List: from n/a thro…

    Cool Plugins Cryptocurrency Widgets – Price Ticker & Coins List
  • Medium 6.5
    CVE-2024-52354

    WordPress Web Stories Widgets For Elementor plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cool Plugins Web Stories Widgets For Elementor shortcodes-for-amp-web-stories-and-elementor-widget allows Stored XSS.This issue affects Web Stories Widgets F…

    Cool Plugins Web Stories Widgets For Elementor
  • Medium 4.7
    CVE-2024-27953

    WordPress Cryptocurrency Widgets – Price Ticker & Coins List Plugin <= 2.6.8 is vulnerable to Broken Access Control

    Missing Authorization vulnerability in Cool Plugins Cryptocurrency Widgets – Price Ticker & Coins List.This issue affects Cryptocurrency Widgets – Price Ticker & Coins List: from n/a through 2.6.8.

    Cool Plugins Cryptocurrency Widgets – Price Ticker & Coins List