Blocksera Vulnerabilities and Affected Products
Vulnerabilities associated with Cryptocurrency Widgets Pack.
Products
Clear product- Image Hover Effects – Elementor Addon4 vulnerabilities
- Cryptocurrency Widgets Pack2 vulnerabilities
- cryptocurrency_widgets_pack1 vulnerability
- Image Hover Effects Block1 vulnerability
- image_hover_effects1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-31539MEDIUM | WordPress Cryptocurrency Widgets Pack plugin <= 2.0.1 - Broken Access Control vulnerabilityMissing Authorization vulnerability in Blocksera Cryptocurrency Widgets Pack cryptocurrency-widgets-pack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cryptocurrency Widgets Pack: from n/a through <= 2.0.1. CWE-862Mar 31, 2025 | CVSS6.5v3.1 | EPSS0.357% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-44588CRITICAL | WordPress Cryptocurrency Widgets Pack Plugin <=1.8.1 is vulnerable to SQL InjectionUnauth. SQL Injection vulnerability in Cryptocurrency Widgets Pack Plugin <=1.8.1 on WordPress. | CVSS9.9v3.1 | EPSS2.25% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |