Description
Several WordPress plugins developed by Cool Plugins are vulnerable to arbitrary plugin installation and activation that can lead to remote code execution by authenticated attackers with minimal permissions, such as a subscriber.
Affected Platforms
Coolplugins Events Search For The Events CalendarCoolplugins Event Single Page Builder For The Event CalendarCoolplugins The Events Calendar Countdown AddonCryptocurrency Payment \& Donation Box Plugins Cryptocurrency Payment \& Donation BoxCoolplugins Events-Notification-Bar-AddonCoolplugins Events Widgets For Elementor And The Events CalendarCoolplugins Events Shortcodes For The Events CalendarCoolplugins Cool TimelineCoolplugins Cryptocurrency WidgetsCoolplugins Cryptocurrency Widgets For Elementor