Wow-company vulnerabilities

Products

• Modal Window 7
• Button Generator 6
• Button Generator – Easily Button Builder 6
• Counter Box 6
• Wp Coder 5
• Float Menu 4
• Herd Effects 4
• Wp Coder 4
• Bubble Menu 3
• Counter Box 3
• Float Menu 3
• Modal Window 3
• Side Menu Lite 3
• Side Menu Lite 3
• Sticky Buttons 3
• Sticky Buttons 3
• Bubble Menu – Circle Floating Menu 2
• Calculator Builder 2
• Floating Button 2
• Floating Button 2
• Popup Box 2
• Side Menu Lite – Add Sticky Fixed Buttons 2
• Viral-signup 2
• Viral Signup 2
• Wow Skype Buttons 2

Newest

• unknown wp coder WP Coder 4.0 - 4.5.1 - Editor+ RCE via Global PHP CVE-2026-104677 7.2 HighOctober 7, 2026
• wow-company wow viral signups Wow Viral Signups 2.1 WordPress Plugin SQL Injection CVE-2017-20245 8.8 HighJune 9, 2026
• wow-company wow forms Wow Forms WordPress Plugin 2.1 SQL Injection CVE-2017-20244 8.8 HighJune 9, 2026
• wow-company hover effects WordPress Hover Effects plugin <= 2.1.2 - SQL Injection Vulnerability CVE-2025-53258 7.6 HighJune 27, 2025
• wow-company float menu WordPress Float menu plugin <= 6.1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability CVE-2025-30912 5.4 MediumMarch 27, 2025
• wow-company counter box, wpcalc counter box – add countdowns, timers & dynamic counters to wordpress +1 more Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site <= 2.0.6 - Authenticated (Administrator+) DOM-Based Stored Cross-Site Scripting CVE-2024-13901 4.4 MediumMarch 1, 2025
• wow-company calculator builder WordPress Calculator Builder plugin <= 1.6.2 - Local File Inclusion vulnerability CVE-2025-26760 7.5 HighFebruary 22, 2025
• wow-company modal window, wpcalc modal window – create popup modal window +1 more Modal Window <= 6.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via iframeBox Shortcode CVE-2025-0897 6.4 MediumFebruary 20, 2025
• wow-company wp coder WordPress WP Coder Plugin <= 3.6 - CSRF to Cross Site Scripting (XSS) vulnerability CVE-2025-24699 7.1 HighFebruary 14, 2025
• wow-company side menu lite WordPress Side Menu Lite Plugin <= 5.3.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability CVE-2025-24724 5.4 MediumJanuary 24, 2025
• unknown herd effects WordPress Herd Effects Plugin <= 6.2.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability CVE-2025-24716 5.4 MediumJanuary 24, 2025
• wow-company modal window WordPress Modal Window Plugin <= 6.1.4 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability CVE-2025-24717 5.4 MediumJanuary 24, 2025
• wow-company counter box WordPress Counter Box Plugin <= 2.0.5 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability CVE-2025-24715 5.4 MediumJanuary 24, 2025
• wow-company button generator – easily button builder WordPress Button Generator – easily Button Builder Plugin <= 3.1.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-24713 5.4 MediumJanuary 24, 2025
• wow-company sticky buttons WordPress Sticky Buttons Plugin <= 4.1.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability CVE-2025-24720 5.4 MediumJanuary 24, 2025
• unknown popup box WordPress Popup Box Plugin <= 3.2.4 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-24711 5.4 MediumJanuary 24, 2025
• wow-company bubble menu – circle floating menu WordPress Bubble Menu Plugin <= 4.0.2 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-24714 5.4 MediumJanuary 24, 2025
• wow-company button generator – easily button builder, button generator +1 more WordPress Button Generator – easily Button Builder plugin <= 2.3.8 - Broken Access Control vulnerability CVE-2023-49154 5.3 MediumDecember 9, 2024
• unknown viral signup, wow-company viral-signup +1 more Viral Signup <= 2.1 - Unauthenticated SQLi CVE-2024-6926 9.8 CriticalSeptember 4, 2024
• unknown viral signup, wow-company viral-signup +1 more Viral Signup <= 2.1 - Admin+ Stored XSS CVE-2024-6927 4.8 MediumAugust 29, 2024
• wow-company modal window WordPress Modal Window – create popup modal window plugin <= 6.0.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-43346 6.5 MediumAugust 18, 2024
• wow-company woocommerce – recent purchases, woocommerce - recent purchases +1 more Woocommerce – Recent Purchases plugin <= 1.0.1 - File Inclusion vulnerability CVE-2024-35634 4.9 MediumJune 4, 2024
• easydigitaldownloads easy digital downloads, wow-company easy digital downloads – recent purchases +1 more WordPress Easy Digital Downloads – Recent Purchases plugin <= 1.0.2 - Remote File Inclusion vulnerability CVE-2024-35629 9.6 CriticalJune 4, 2024
• unknown counter box Counter Box < 1.2.4 - Counter Deletion via CSRF CVE-2024-3481 5.2 MediumMay 2, 2024
• unknown herd effects Herd Effects < 5.2.7 - Effect Deletion via CSRF CVE-2024-3478 6.1 MediumMay 2, 2024
• unknown popup box Popup Box < 2.2.7 - Popup Deletion via CSRF CVE-2024-3477 4.3 MediumMay 2, 2024
• unknown side menu lite Side Menu Lite < 4.2.1 - Menu Deletion via CSRF CVE-2024-3476 8.8 HighMay 2, 2024
• unknown sticky buttons Sticky Buttons < 3.2.4 - Button Deletion via CSRF CVE-2024-3475 7.5 HighMay 2, 2024
• unknown wow skype buttons Wow Skype Buttons < 4.0.4 - Button Deletion via CSRF CVE-2024-3474 8.8 HighMay 2, 2024
• unknown modal window Modal Window < 5.3.10 - Modal Deletion via CSRF CVE-2024-3472 5.9 MediumMay 2, 2024
• unknown button generator Button Generator < 3.0 - Button Deletion via CSRF CVE-2024-3471 3.4 LowMay 2, 2024
• unknown float menu Float menu < 6.0.1 - Menu Deletion via CSRF CVE-2024-2405 4.5 MediumMay 2, 2024
• wow-company modal window, wpcalc modal window – create popup modal window +1 more Modal Window – create popup modal window <= 5.3.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-2457 6.4 MediumApril 9, 2024
• wow-company wp coder WordPress WP Coder plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability CVE-2024-2578 5.9 MediumMarch 21, 2024
• wow-company sticky buttons, wpcalc sticky buttons – floating buttons builder +1 more Sticky Buttons <= 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-0703 4.4 MediumJanuary 23, 2024
• wow-company floating button WordPress Floating Button Plugin <= 6.0 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-52149 5.4 MediumJanuary 5, 2024
• wow-company button generator – easily button builder, button generator +1 more WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-49155 4.3 MediumDecember 18, 2023
• wow-company side menu lite – add sticky fixed buttons, side menu lite +1 more WordPress Side Menu Lite Plugin <= 4.0 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-27418 4.3 MediumNovember 12, 2023
• wow-company modal window, wpcalc modal window – create popup modal window +1 more Modal Window <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-5161 6.4 MediumSeptember 26, 2023
• unknown herd effects Herd Effects < 5.2.3 - Admin+ Stored XSS CVE-2023-4022 4.8 MediumSeptember 11, 2023
• unknown herd effects Herd Effects < 5.2.4 - Effect Deletion via CSRF CVE-2023-4318 4.3 MediumSeptember 11, 2023
• unknown bubble menu Bubble Menu < 3.0.5 - Admin+ Stored XSS CVE-2023-3650 4.8 MediumAugust 7, 2023
• wow-company button generator – easily button builder, button generator +1 more WordPress Button Generator – easily Button Builder Plugin <= 2.3.5 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-25443 4.3 MediumJuly 11, 2023
• unknown float menu Float menu < 5.0.3 - Admin+ Stored Cross-Site Scripting CVE-2023-3225 4.8 MediumJuly 10, 2023
• wow-company button generator – easily button builder, wow-estore button generator - easily button builder +1 more WordPress Button Generator – easily Button Builder Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS) CVE-2023-27452 5.9 MediumJune 22, 2023
• unknown bubble menu, button generator, calculator builder +10 more +12 more Multiple Plugins from Wow-Company - Reflected XSS CVE-2023-2362 6.1 MediumJune 12, 2023
• wow-company bubble menu – circle floating menu, bubble menu +1 more WordPress Bubble Menu – circle floating menu Plugin <= 3.0.1 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-23984 5.4 MediumMarch 1, 2023
• wow-company wp coder, wpcalc wp coder – insert & manage code snippets +1 more WP Coder – add custom html, css and js code <= 2.5.3 - Authenticated (Admin+) SQL Injection CVE-2023-0895 7.2 HighFebruary 17, 2023
• wow-company wp coder, unknown wp coder – add custom html, css and js code +1 more WP Coder < 2.5.3 - Code Deletion via CSRF CVE-2022-2388 6.5 MediumAugust 22, 2022
• wow-company counter box, unknown counter box – wordpress plugin for countdown, timer, counter +1 more Counter Box < 1.2.1 - Arbitrary Counter Activation/Deactivation via CSRF CVE-2022-2245 8.8 HighAugust 1, 2022
• Show olderLoading…