Cool Plugins vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Cool Plugins products: 3 record(s), with severity, exploitation and fixes.

AI Translation for Polylang 1 Elementor Contact Form DB 1 Cool Formkit Lite 1

Exploited only (KEV) →

CVE-2026-107419 Medium · 5.4 CWE-862 Oct 9, 2026

WordPress AI Translation for Polylang plugin <= 1.6.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Cool Plugins AI Translation for Polylang automatic-translations-for-polylang allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Translation for Polylang: from n/a through 1.6.2.

CVE-2026-97301 Medium · 6.5 CWE-79 Sep 30, 2026

WordPress Cool Formkit Lite plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <= 2.7.8 versions.

CVE-2026-25320 Medium · 5.3 CWE-862 Feb 19, 2026

WordPress Elementor Contact Form DB plugin <= 2.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Cool Plugins Elementor Contact Form DB sb-elementor-contact-form-db allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Contact Form DB: from n/a through <= 2.1.3.