| Package | Affected versions | Patched versions |
|---|---|---|
| cool timeline | < 2.4 | 2.4 |
| cryptocurrency widgets | < 2.5.1 | 2.5.1 |
| cryptocurrency widgets for elementor | < 1.3 | 1.3 |
| event single page builder for the event calendar | < 1.6 | 1.6 |
| events-notification-bar-addon | < 1.6 | 1.6 |
| events search for the events calendar | < 1.2 | 1.2 |
| events shortcodes for the events calendar | < 2.0 | 2.0 |
| events widgets for elementor and the events calendar | < 1.5 | 1.5 |
| the events calendar countdown addon | < 1.4 | 1.4 |
| cryptocurrency payment & donation box | < 1.8 | 1.8 |
Several WordPress plugins developed by Cool Plugins are vulnerable to arbitrary plugin installation and activation that can lead to remote code execution by authenticated attackers with minimal permissions, such as a subscriber.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free