CVEs we hold for Wow-company
Records whose assigning authority named Wow-company as the affected vendor. Newest identifiers first, capped at 200.
CVE-2025-53258WordPress Hover Effects plugin <= 2.1.2 - SQL Injection VulnerabilityWow-Company Hover Effects
CVE-2025-30912WordPress Float menu plugin <= 6.1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerabilityWow-Company Float menu
CVE-2025-26760WordPress Calculator Builder plugin <= 1.6.2 - Local File Inclusion vulnerabilityWow-Company Calculator Builder
CVE-2025-24724WordPress Side Menu Lite Plugin <= 5.3.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerabilityWow-Company Side Menu Lite
CVE-2025-24720WordPress Sticky Buttons Plugin <= 4.1.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerabilityWow-Company Sticky Buttons
CVE-2025-24717WordPress Modal Window Plugin <= 6.1.4 - Cross Site Request Forgery (CSRF) to Settings Change vulnerabilityWow-Company Modal Window
CVE-2025-24716WordPress Herd Effects Plugin <= 6.2.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerabilityWow-Company Herd Effects
CVE-2025-24715WordPress Counter Box Plugin <= 2.0.5 - Cross Site Request Forgery (CSRF) to Settings Change vulnerabilityWow-Company Counter Box
CVE-2025-24714WordPress Bubble Menu Plugin <= 4.0.2 - Cross Site Request Forgery (CSRF) vulnerabilityWow-Company Bubble Menu – circle floating menu
CVE-2025-24713WordPress Button Generator – easily Button Builder Plugin <= 3.1.1 - Cross Site Request Forgery (CSRF) vulnerabilityWow-Company Button Generator – easily Button Builder
CVE-2025-24711WordPress Popup Box Plugin <= 3.2.4 - Cross Site Request Forgery (CSRF) vulnerabilityWow-Company Popup Box
CVE-2025-24699WordPress WP Coder Plugin <= 3.6 - CSRF to Cross Site Scripting (XSS) vulnerabilityWow-Company WP Coder
CVE-2024-43346WordPress Modal Window – create popup modal window plugin <= 6.0.3 - Cross Site Scripting (XSS) vulnerabilityWow-Company Modal Window
CVE-2024-35634Woocommerce – Recent Purchases plugin <= 1.0.1 - File Inclusion vulnerabilityWow-Company Woocommerce – Recent Purchases
CVE-2024-35629WordPress Easy Digital Downloads – Recent Purchases plugin <= 1.0.2 - Remote File Inclusion vulnerabilityWow-Company Easy Digital Downloads – Recent Purchases
CVE-2023-52149WordPress Floating Button Plugin <= 6.0 is vulnerable to Cross Site Request Forgery (CSRF)Wow-Company Floating Button
CVE-2023-49155WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)Wow-Company Button Generator – easily Button Builder
CVE-2023-49154WordPress Button Generator – easily Button Builder plugin <= 2.3.8 - Broken Access Control vulnerabilityWow-Company Button Generator – easily Button Builder
CVE-2023-27452WordPress Button Generator – easily Button Builder Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)Wow-Company Button Generator – easily Button Builder
CVE-2023-27418WordPress Side Menu Lite Plugin <= 4.0 is vulnerable to Cross Site Request Forgery (CSRF)Wow-Company Side Menu Lite – add sticky fixed buttons
CVE-2023-25443WordPress Button Generator – easily Button Builder Plugin <= 2.3.5 is vulnerable to Cross Site Request Forgery (CSRF)Wow-Company Button Generator – easily Button Builder
CVE-2023-23984WordPress Bubble Menu – circle floating menu Plugin <= 3.0.1 is vulnerable to Cross Site Request Forgery (CSRF)Wow-Company Bubble Menu – circle floating menu
CVE-2022-29448WordPress Herd Effects plugin <= 5.2 - Local File Inclusion (LFI) vulnerabilityWow-Company Herd Effects (WordPress plugin)
CVE-2022-29447WordPress Hover Effects plugin <= 2.1 - Authenticated Local File Inclusion (LFI) vulnerabilityWow-Company Hover Effects – easily create any hover effect…
CVE-2022-29446WordPress Counter Box plugin <= 1.1.1 - Authenticated Local File Inclusion (LFI) vulnerabilityWow-Company Counter Box (WordPress)
CVE-2022-29445WordPress Popup Box plugin <= 2.1.2 - Authenticated Local File Inclusion (LFI) vulnerabilityWow-Company Popup Box (WordPress plugin)
28 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.