Unknown Coolclock vulnerabilities

2 CVEs affecting Unknown Coolclock, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-83546, published 2026-09-11.

More from Unknown.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-83546, published 2026-09-11. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. The CoolClock WordPress plugin before 4.3.8 does not properly escape a skin setting before outputting it within an HTML attribute, allowing users with contributor-level access and above to inject…
• CVE-2026-83545, published 2026-09-11. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. The CoolClock WordPress plugin before 4.3.8 does not properly escape a custom skin setting before outputting it inside an inline script, allowing users with contributor-level access and above to…