Wow-Company vulnerabilities and threats

15 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.6	EPSS 0.4%	CVE-2025-53258Hover Effects (WordPress plugin) · SQL Injection High7.6EPSS 0.4%2025-06-27CVE Database V5CVE-2025-53258 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wow-Company Hover Effects hover-effects allows SQL Injection.This issue affects Hover Effects: from n/a through <= 2.1.2. EPSS 0.4%Vulnerability Wow-Company	CVE Database V5	2025-06-27
Medium	5.4	EPSS 0.2%	CVE-2025-30912Float menu (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.2%2025-03-27CVE Database V5CVE-2025-30912 Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Float menu float-menu allows Cross Site Request Forgery.This issue affects Float menu: from n/a through <= 6.1.2. EPSS 0.2%Vulnerability Wow-Company	CVE Database V5	2025-03-27
High	7.5	EPSS 0.6%	CVE-2025-26760Calculator Builder (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High7.5EPSS 0.6%2025-02-22CVE Database V5CVE-2025-26760 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Wow-Company Calculator Builder calculator-builder allows PHP Local File Inclusion.This issue affects Calculator Builder: from n/a through <= 1.6.2. EPSS 0.6%Vulnerability Wow-Company	CVE Database V5	2025-02-22
High	7.1	EPSS 0.1%	CVE-2025-24699Wow-Company WP Coder · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.1%2025-02-14CVE Database V5CVE-2025-24699 Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company WP Coder wp-coder allows Cross-Site Scripting (XSS).This issue affects WP Coder: from n/a through <= 3.6. EPSS 0.1%Vulnerability	CVE Database V5	2025-02-14
Medium	5.4	EPSS 0.2%	CVE-2025-24724Side Menu Lite (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.2%2025-01-24CVE Database V5CVE-2025-24724 Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Side Menu Lite side-menu-lite allows Cross Site Request Forgery.This issue affects Side Menu Lite: from n/a through <= 5.3.1. EPSS 0.2%Vulnerability Wow-Company	CVE Database V5	2025-01-24
Medium	5.4	EPSS 0.2%	CVE-2025-24716Herd Effects (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.2%2025-01-24CVE Database V5CVE-2025-24716 Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Herd Effects mwp-herd-effect allows Cross Site Request Forgery.This issue affects Herd Effects: from n/a through <= 6.2.1. EPSS 0.2%Vulnerability Wow-Company	CVE Database V5	2025-01-24
Medium	5.4	EPSS 0.2%	CVE-2025-24717Modal Window (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.2%2025-01-24CVE Database V5CVE-2025-24717 Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Modal Window modal-window allows Cross Site Request Forgery.This issue affects Modal Window: from n/a through <= 6.1.4. EPSS 0.2%Vulnerability Wow-Company	CVE Database V5	2025-01-24
Medium	5.4	EPSS 0.2%	CVE-2025-24715Counter Box (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.2%2025-01-24CVE Database V5CVE-2025-24715 Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Counter Box counter-box allows Cross Site Request Forgery.This issue affects Counter Box: from n/a through <= 2.0.5. EPSS 0.2%Vulnerability Wow-Company	CVE Database V5	2025-01-24
Medium	5.4	EPSS 0.2%	CVE-2025-24713Button Generator (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.2%2025-01-24CVE Database V5CVE-2025-24713 Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Button Generator – easily Button Builder button-generation allows Cross Site Request Forgery.This issue affects Button Generator – easily Button Builder: from n/a through <= 3.1.1. EPSS 0.2%Vulnerability Wow-Company	CVE Database V5	2025-01-24
Medium	5.4	EPSS 0.2%	CVE-2025-24720Sticky Buttons (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.2%2025-01-24CVE Database V5CVE-2025-24720 Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Sticky Buttons sticky-buttons allows Cross Site Request Forgery.This issue affects Sticky Buttons: from n/a through <= 4.1.1. EPSS 0.2%Vulnerability Wow-Company	CVE Database V5	2025-01-24
Medium	5.4	EPSS 0.2%	CVE-2025-24711Popup Box (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.2%2025-01-24CVE Database V5CVE-2025-24711 Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Popup Box popup-box allows Cross Site Request Forgery.This issue affects Popup Box: from n/a through <= 3.2.4. EPSS 0.2%Vulnerability Wow-Company	CVE Database V5	2025-01-24
Medium	5.4	EPSS 0.2%	CVE-2025-24714Bubble Menu (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.2%2025-01-24CVE Database V5CVE-2025-24714 Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Bubble Menu – circle floating menu bubble-menu allows Cross Site Request Forgery.This issue affects Bubble Menu – circle floating menu: from n/a through <= 4.0.2. EPSS 0.2%Vulnerability Wow-Company	CVE Database V5	2025-01-24
Medium	6.5	EPSS 0.3%	CVE-2024-43346Modal Window (WordPress plugin) · XSS or 'Cross-site Scripting' Medium6.5EPSS 0.3%2024-08-18CVE Database V5CVE-2024-43346 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wow-Company Modal Window allows Stored XSS.This issue affects Modal Window: from n/a through 6.0.3. EPSS 0.3%Vulnerability Wow-Company CWE-79	CVE Database V5	2024-08-18
Medium	4.9	EPSS 0.5%	CVE-2024-35634Woocommerce (WordPress plugin) · Path Traversal Medium4.9EPSS 0.5%2024-06-04CVE Database V5CVE-2024-35634 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Wow-Company Woocommerce – Recent Purchases allows PHP Local File Inclusion.This issue affects Woocommerce – Recent Purchases: from n/a through 1.0.1. EPSS 0.5%Vulnerability Wow-Company CWE-22	CVE Database V5	2024-06-04
Critical	9.6	EPSS 0.5%	CVE-2024-35629Easy Digital Downloads (WordPress plugin) · PHP Remote File Inclusion Critical9.6EPSS 0.5%2024-06-04CVE Database V5CVE-2024-35629 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Wow-Company Easy Digital Downloads – Recent Purchases allows PHP Remote File Inclusion.This issue affects Easy Digital Downloads – Recent Purchases: from n/a through 1.0.2. EPSS 0.5%Vulnerability Wow-Company CWE-98	CVE Database V5	2024-06-04

Page 1 of 1