Skip to content
OpenAdvisories

Vendor

coolplugins

3 known vulnerabilities.

Products

Cool FormKit Lite – Advanced Form Builder for Elementor 1 Cryptocurrency Widgets For Elementor 1 Events Widgets For Elementor And The Events Calendar 1 Coins MarketCap 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-118500

    Cool FormKit Lite <= 2.7.9 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Form Field custom_id Parameter

    The Cool FormKit Lite – Advanced Form Builder for Elementor plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the '_elementor_data.form_fields[].custom_id' parameter in all versions up to, and including, 2.7.9 due to insufficient…

    coolplugins Cool FormKit Lite – Advanced Form Builder for Elementor Web / CMS
  • Medium 6.5
    CVE-2024-56257

    WordPress Coins MarketCap plugin <= 5.5.8 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CoolPlugins Coins MarketCap coins-marketcap allows DOM-Based XSS.This issue affects Coins MarketCap: from n/a through <= 5.5.8.

    coolplugins Coins MarketCap