CVE-2021-25044: Premium-Themes Cryptocurrency Pricing List And Ticker

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

The Cryptocurrency Pricing list and Ticker WordPress plugin through 1.5 does not sanitise and escape the ccpw_setpage parameter before outputting it back in pages where its shortcode is embed, leading to a Reflected Cross-Site Scripting issue

Affected products

• Premium-Themes Cryptocurrency Pricing List And Ticker: up to and including 1.5

Published 2022-10-10. Last modified 2026-06-17.