Wow-Company
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Button Generator – easily Button Builder | 5 | – | Jan 24, 2025 |
| Modal Window | 2 | – | Jan 24, 2025 |
| Bubble Menu – circle floating menu | 2 | – | Jan 24, 2025 |
| Counter Box (WordPress) | 1 | – | May 19, 2022 |
| Easy Digital Downloads – Recent Purchases | 1 | – | Jun 4, 2024 |
| Float menu | 1 | – | Mar 27, 2025 |
| Floating Button | 1 | – | Jan 5, 2024 |
| Herd Effects | 1 | – | Jan 24, 2025 |
| Herd Effects (WordPress plugin) | 1 | – | May 20, 2022 |
| Hover Effects | 1 | – | Jun 27, 2025 |
| Hover Effects – easily create any hover effect (WordPress plugin) | 1 | – | May 20, 2022 |
| Popup Box | 1 | – | Jan 24, 2025 |
| Popup Box (WordPress plugin) | 1 | – | May 18, 2022 |
| Side Menu Lite | 1 | – | Jan 24, 2025 |
| Side Menu Lite – add sticky fixed buttons | 1 | – | Nov 12, 2023 |
| Sticky Buttons | 1 | – | Jan 24, 2025 |
| Woocommerce – Recent Purchases | 1 | – | Jun 4, 2024 |
| WP Coder | 1 | – | Feb 14, 2025 |
| Calculator Builder | 1 | – | Feb 22, 2025 |
| Counter Box | 1 | – | Jan 24, 2025 |
Exploited and recent CVEs
- CVE-2025-53258 WordPress Hover Effects plugin <= 2.1.2 - SQL Injection Vulnerability 0.4%
- CVE-2025-30912 WordPress Float menu plugin <= 6.1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability 0.2%
- CVE-2025-26760 WordPress Calculator Builder plugin <= 1.6.2 - Local File Inclusion vulnerability 0.6%
- CVE-2025-24699 WordPress WP Coder Plugin <= 3.6 - CSRF to Cross Site Scripting (XSS) vulnerability 0.1%
- CVE-2025-24724 WordPress Side Menu Lite Plugin <= 5.3.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability 0.2%
- CVE-2025-24716 WordPress Herd Effects Plugin <= 6.2.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability 0.2%
- CVE-2025-24717 WordPress Modal Window Plugin <= 6.1.4 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability 0.2%
- CVE-2025-24715 WordPress Counter Box Plugin <= 2.0.5 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability 0.2%
- CVE-2025-24713 WordPress Button Generator – easily Button Builder Plugin <= 3.1.1 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2025-24720 WordPress Sticky Buttons Plugin <= 4.1.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability 0.2%
- CVE-2025-24711 WordPress Popup Box Plugin <= 3.2.4 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2025-24714 WordPress Bubble Menu Plugin <= 4.0.2 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2023-49154 WordPress Button Generator – easily Button Builder plugin <= 2.3.8 - Broken Access Control vulnerability 0.6%
- CVE-2024-43346 WordPress Modal Window – create popup modal window plugin <= 6.0.3 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-35634 Woocommerce – Recent Purchases plugin <= 1.0.1 - File Inclusion vulnerability 0.5%
- CVE-2024-35629 WordPress Easy Digital Downloads – Recent Purchases plugin <= 1.0.2 - Remote File Inclusion vulnerability 0.5%
- CVE-2023-52149 WordPress Floating Button Plugin <= 6.0 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
- CVE-2023-49155 WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
- CVE-2023-27418 WordPress Side Menu Lite Plugin <= 4.0 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
- CVE-2023-25443 WordPress Button Generator – easily Button Builder Plugin <= 2.3.5 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
- CVE-2023-27452 WordPress Button Generator – easily Button Builder Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2023-23984 WordPress Bubble Menu – circle floating menu Plugin <= 3.0.1 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
- CVE-2022-29447 WordPress Hover Effects plugin <= 2.1 - Authenticated Local File Inclusion (LFI) vulnerability 1.0%
- CVE-2022-29448 WordPress Herd Effects plugin <= 5.2 - Local File Inclusion (LFI) vulnerability 1.0%
- CVE-2022-29446 WordPress Counter Box plugin <= 1.1.1 - Authenticated Local File Inclusion (LFI) vulnerability 1.0%
- CVE-2022-29445 WordPress Popup Box plugin <= 2.1.2 - Authenticated Local File Inclusion (LFI) vulnerability 1.1%