plugin
5 known security issues reported for the Cryptocurrency Price Ticker Widget WordPress plugin. Most recent disclosed Aug 16, 2024.
Running Cryptocurrency Price Ticker Widget on your site? Check whether your installed version is affected.
Scan your site freeThe Cryptocurrency Widgets – Price Ticker & Coins List plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.8.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages th...
The Cryptocurrency Widgets – Price Ticker & Coins List plugin for WordPress is vulnerable to unauthorized access due to an insufficient capability check on the ccpw_post_type() function in versions up to, and including, 2.6.8. This makes it possible for authenticated attackers, with author-level access and above, to p...
The Cryptocurrency Widgets – Price Ticker & Coins List plugin for WordPress is vulnerable to SQL Injection via the 'coinslist' parameter in versions 2.0 to 2.6.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthen...
The Cryptocurrency Widgets – Price Ticker & Coins List plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on one of its functions in versions up to, and including, 2.6.2. This makes it possible for unauthenticated attackers to perform unauthorized actions.
Several WordPress plugins developed by Cool Plugins are vulnerable to arbitrary plugin installation and activation that can lead to remote code execution by authenticated attackers with minimal permissions, such as a subscriber.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free