Several WordPress plugins developed by Cool Plugins are vulnerable to arbitrary plugin installation and activation that can lead to remote code execution by authenticated attackers with minimal permissions, such as a subscriber.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Cool Timeline Plugin | — | Update cool-timeline plugin to version 2.4, or a newer patched version | May 15, 2025 | Apr 4, 2022 |
| Countdown For The Events Calendar Plugin | — | Update countdown-for-the-events-calendar plugin to version 1.4, or a newer patched version | May 15, 2025 | Apr 4, 2022 |
| Cryptocurrency Donation Box Plugin | — | Update cryptocurrency-donation-box plugin to version 1.8, or a newer patched version | May 15, 2025 | Apr 4, 2022 |
| Cryptocurrency Price Ticker Widget Plugin | — | Update cryptocurrency-price-ticker-widget plugin to version 2.5.1, or a newer patched version | May 15, 2025 | Apr 4, 2022 |
| Cryptocurrency Widgets For Elementor Plugin | — | Update cryptocurrency-widgets-for-elementor plugin to version 1.3, or a newer patched version | May 15, 2025 | Apr 4, 2022 |
| Event Page Templates Addon For The Events Calendar Plugin | — | Update event-page-templates-addon-for-the-events-calendar plugin to version 1.6, or a newer patched version | May 15, 2025 | Apr 4, 2022 |
| Events Notification Bar Addon Plugin | — | Update events-notification-bar-addon plugin to version 1.6, or a newer patched version | May 15, 2025 | Apr 4, 2022 |
| Events Search Addon For The Events Calendar Plugin | — | Update events-search-addon-for-the-events-calendar plugin to version 1.2, or a newer patched version | May 15, 2025 | Apr 4, 2022 |
| Events Widgets For Elementor And The Events Calendar Plugin | — | Update events-widgets-for-elementor-and-the-events-calendar plugin to version 1.5, or a newer patched version | May 15, 2025 | Apr 4, 2022 |
| Template Events Calendar Plugin | — | Update template-events-calendar plugin to version 2.0, or a newer patched version | May 15, 2025 | Apr 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub