← Back

Wow Company

wow-company

43 CVEs • 20 products

Products (20)

Click to collapse
Toggle
Modal Window
modal_window
7 CVEs
Counter Box
counter_box
6 CVEs
Button Generator
button_generator
5 CVEs
Wp Coder
wp_coder
5 CVEs
Herd Effects
herd_effects
4 CVEs
Bubble Menu
bubble_menu
3 CVEs
Float Menu
float_menu
3 CVEs
Side Menu Lite
side_menu_lite
3 CVEs
Sticky Buttons
sticky_buttons
3 CVEs
Floating Button
floating_button
2 CVEs
Popup Box
popup_box
2 CVEs
Wow Skype Buttons
wow_skype_buttons
2 CVEs
Viral Signup
viral_signup
2 CVEs
Wow Forms
wow_forms
1 CVE
Wpcalc
wpcalc
1 CVE
Wow Countdowns
wow_countdowns
1 CVE
Hover Effects
hover_effects
1 CVE
Calculator Builder
calculator-builder
1 CVE
Easy Digital Downloads
easy_digital_downloads
1 CVE
Woocommerce Recent Purchases
woocommerce_-_recent_purchases
1 CVE

CVEs (43)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-25052
1Wow Company
1Button Generator
Nov 21, 2024
Jan 10, 2022
N/A· v4
8.8 HIGH· v3
5.1 MEDIUM· v2
The Button Generator WordPress plugin before 2.3.3 within the wow-company admin menu page allows to include() arbitrary file with PHP extension (as well as with data:// or http:// protocols), thus leading to CSRF RCE.
CVE-2021-25051
1Wow Company
1Modal Window
Nov 21, 2024
Jan 10, 2022
N/A· v4
8.8 HIGH· v3
5.1 MEDIUM· v2
The Modal Window WordPress plugin before 5.2.2 within the wow-company admin menu page allows to include() arbitrary file with PHP extension (as well as with data:// or http:// protocols), thus leading to CSRF RCE.
CVE-2021-24628
1Wow Company
1Wow Forms
Nov 21, 2024
Nov 8, 2021
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
The Wow Forms WordPress plugin through 3.1.3 does not sanitise or escape a 'did' GET parameter before using it in a SQL statement, when deleting a form in the admin dashboard, leading to an authenticated SQL injection