Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CoolPlugins vulnerabilities

3 published CVEs name CoolPlugins among the affected products.

All 3 in the listAtom feed of new CVEs
Published CVEs
3
Last 12 months
1
Critical
0
Known exploited
0

Critical 0High 1Medium 2Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20231
  2. 20251
  3. 20261

Newest CVEs

  • CVE-2026-118500

    Cool FormKit Lite <= 2.7.9 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Form Field custom_id Parameter

    coolplugins · Cool FormKit Lite – Advanced Form Builder for Elementor

    Medium6.4
  • CVE-2024-56257

    WordPress Coins MarketCap plugin <= 5.5.8 - Cross Site Scripting (XSS) vulnerability

    CoolPlugins · Coins MarketCap

    Medium6.5
  • CVE-2022-4950

    Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation

    narinder-singh · The Events Calendar Events Notification Bar Addon

    High8.8

Products with the most CVEs

  1. Coins MarketCap1
  2. Cool FormKit Lite – Advanced Form Builder for Elementor1
  3. Cryptocurrency Widgets For Elementor1
  4. Events Widgets For Elementor And The Events Calendar1

Most common weaknesses

  1. CWE-79 Cross-site scripting (XSS)2
  2. CWE-862 Missing authorization1