Wow-Company vulnerabilities
We track 9 vulnerabilities in Wow-Company products across 10 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on June 27, 2025.
Latest Wow-Company vulnerabilities
- 7.6 High severity
Hover Effects: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wow-Company Hover Effects hover-effects allows SQL Injection.This issue affects Hover Effects: from n/a through <= 2.1.2.
- 7.5 High severity
Calculator Builder: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Wow-Company Calculator Builder calculator-builder allows PHP Local File Inclusion.This issue affects Calculator Builder: from n/a through <
- 7.1 High severity
WP Coder: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company WP Coder wp-coder allows Cross-Site Scripting (XSS).This issue affects WP Coder: from n/a through <= 3.6.
- 8.8 High severity
Modal Window: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Modal Window modal-window allows Cross Site Request Forgery.This issue affects Modal Window: from n/a through <= 6.1.4.
- 9.8 Critical severity
Viral Signup: Improper Neutralization of Special Elements used in an SQL Command
The Viral Signup WordPress plugin through 2.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection
- 9.8 Critical severity
Easy Digital Downloads – Recent Purchases: Inclusion of Functionality from Untrusted Control Sphere
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Wow-Company Easy Digital Downloads – Recent Purchases allows PHP Remote File Inclusion.This issue affects Easy Digital Downloads – Recent P
- 8.8 High severity
Side Menu Lite: Cross-Site Request Forgery
The Side Menu Lite WordPress plugin before 4.2.1 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting buttons via CSRF attacks
- 8.8 High severity
Button Generator – easily Button Builder: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Button Generator – easily Button Builder.This issue affects Button Generator – easily Button Builder: from n/a through 2.3.8.
- 8.8 High severity
Counter Box – WordPress plugin for countdown…: Cross-Site Request Forgery
The Counter Box WordPress plugin before 1.2.1 is lacking CSRF check when activating and deactivating counters, which could allow attackers to make a logged in admin perform such actions via CSRF attacks