Approved changes feed: RSS · Atom

cpe:2.3:a:blocksera:cryptocurrency_widgets_pack:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorBlocksera (aae0a482-ba10-5b6c-bcdd-32d7112c8011)
ProductCryptocurrency Widgets Pack (d3cad766-f52f-5de6-881c-456bbf61e167)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-4059 vulnerable 2026-06-08 05:51:36.671465 Cryptocurrency Widgets Pack < 2.0 - Unauthenticated SQLi
The Cryptocurrency Widgets Pack WordPress plugin before 2.0 does not sanitise and escape some parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
Published: 2023-01-02T21:49:10.184Z
Updated: 2025-04-10T19:14:23.094Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44588 vulnerable 2026-06-08 05:49:35.679609 WordPress Cryptocurrency Widgets Pack Plugin <=1.8.1 is vulnerable to SQL Injection
CRITICAL (9.9)
Unauth. SQL Injection vulnerability in Cryptocurrency Widgets Pack Plugin <=1.8.1 on WordPress.
Published: 2022-12-15T13:21:40.384Z
Updated: 2026-04-28T16:07:51.352Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.