Wpcalc vulnerabilities

Products

• Modal Window – Create Popup Modal Window 4
• Counter Box – Add Countdowns, Timers & Dynamic Counters To Wordpress 2
• Wp Coder – Add Custom Html, Css And Js Code 2

Newest

• wpcalc counter box – add countdowns, timers & dynamic counters to wordpress Counter Box <= 2.0.13 - Authenticated (Administrator+) PHP Object Injection via Import CVE-2026-12115 6.6 MediumJune 17, 2026
• wpcalc popup box – easily create wordpress popups Popup Box – Easily Create WordPress Popups <= 3.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-12122 6.4 MediumFebruary 18, 2026
• wow-company counter box, wpcalc counter box – add countdowns, timers & dynamic counters to wordpress +1 more Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site <= 2.0.6 - Authenticated (Administrator+) DOM-Based Stored Cross-Site Scripting CVE-2024-13901 4.4 MediumMarch 1, 2025
• wow-company modal window, wpcalc modal window – create popup modal window +1 more Modal Window <= 6.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via iframeBox Shortcode CVE-2025-0897 6.4 MediumFebruary 20, 2025
• wow-company modal window, wpcalc modal window – create popup modal window +1 more Modal Window – create popup modal window <= 5.3.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-2457 6.4 MediumApril 9, 2024
• wow-company sticky buttons, wpcalc sticky buttons – floating buttons builder +1 more Sticky Buttons <= 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-0703 4.4 MediumJanuary 23, 2024
• wow-company modal window, wpcalc modal window – create popup modal window +1 more Modal Window <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-5161 6.4 MediumSeptember 26, 2023
• wow-company wp coder, wpcalc wp coder – insert & manage code snippets +1 more WP Coder – add custom html, css and js code <= 2.5.3 - Authenticated (Admin+) SQL Injection CVE-2023-0895 7.2 HighFebruary 17, 2023
• wow-company wp coder, unknown wp coder – add custom html, css and js code +1 more WP Coder < 2.5.3 - Code Deletion via CSRF CVE-2022-2388 6.5 MediumAugust 22, 2022
• wow-company wp coder, unknown wp coder – add custom html, css and js code +1 more WP Coder < 2.5.2 - RFI leading to RCE via CSRF CVE-2021-25053 8.8 HighJanuary 10, 2022
• wow-company modal window, unknown modal window – create popup modal window +1 more Modal Window < 5.2.2 - RFI leading to RCE via CSRF CVE-2021-25051 8.8 HighJanuary 10, 2022