Filtered by vendor Coolplugins Subscriptions
Filtered by product Cool Timeline Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-4950 2 Coolplugins, Cryptocurrency Payment \& Donation Box Plugins 10 Cool Timeline, Cryptocurrency Widgets, Cryptocurrency Widgets For Elementor and 7 more 2024-12-23 8.8 High
Several WordPress plugins developed by Cool Plugins are vulnerable to arbitrary plugin installation and activation that can lead to remote code execution by authenticated attackers with minimal permissions, such as a subscriber.
CVE-2020-36738 1 Coolplugins 1 Cool Timeline 2024-11-21 4.3 Medium
The Cool Timeline (Horizontal & Vertical Timeline) plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.2. This is due to missing or incorrect nonce validation on the ctl_save() function. This makes it possible for unauthenticated attackers to save field icons via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.