Wow-Company

Products

ProductCVEsExploitedLatest
Button Generator – easily Button Builder5–Jan 24, 2025
Modal Window2–Jan 24, 2025
Bubble Menu – circle floating menu2–Jan 24, 2025
Counter Box (WordPress)1–May 19, 2022
Easy Digital Downloads – Recent Purchases1–Jun 4, 2024
Float menu1–Mar 27, 2025
Floating Button1–Jan 5, 2024
Herd Effects1–Jan 24, 2025
Herd Effects (WordPress plugin)1–May 20, 2022
Hover Effects1–Jun 27, 2025
Hover Effects – easily create any hover effect (WordPress plugin)1–May 20, 2022
Popup Box1–Jan 24, 2025
Popup Box (WordPress plugin)1–May 18, 2022
Side Menu Lite1–Jan 24, 2025
Side Menu Lite – add sticky fixed buttons1–Nov 12, 2023
Sticky Buttons1–Jan 24, 2025
Woocommerce – Recent Purchases1–Jun 4, 2024
WP Coder1–Feb 14, 2025
Calculator Builder1–Feb 22, 2025
Counter Box1–Jan 24, 2025

Exploited and recent CVEs

  • CVE-2025-53258 High 7.6 WordPress Hover Effects plugin <= 2.1.2 - SQL Injection Vulnerability 0.4%
  • CVE-2025-30912 Medium 5.4 WordPress Float menu plugin <= 6.1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability 0.2%
  • CVE-2025-26760 High 7.5 WordPress Calculator Builder plugin <= 1.6.2 - Local File Inclusion vulnerability 0.6%
  • CVE-2025-24699 High 7.1 WordPress WP Coder Plugin <= 3.6 - CSRF to Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2025-24724 Medium 5.4 WordPress Side Menu Lite Plugin <= 5.3.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability 0.2%
  • CVE-2025-24716 Medium 5.4 WordPress Herd Effects Plugin <= 6.2.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability 0.2%
  • CVE-2025-24717 Medium 5.4 WordPress Modal Window Plugin <= 6.1.4 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability 0.2%
  • CVE-2025-24715 Medium 5.4 WordPress Counter Box Plugin <= 2.0.5 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability 0.2%
  • CVE-2025-24713 Medium 5.4 WordPress Button Generator – easily Button Builder Plugin <= 3.1.1 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2025-24720 Medium 5.4 WordPress Sticky Buttons Plugin <= 4.1.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability 0.2%
  • CVE-2025-24711 Medium 5.4 WordPress Popup Box Plugin <= 3.2.4 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2025-24714 Medium 5.4 WordPress Bubble Menu Plugin <= 4.0.2 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2023-49154 Medium 5.3 WordPress Button Generator – easily Button Builder plugin <= 2.3.8 - Broken Access Control vulnerability 0.6%
  • CVE-2024-43346 Medium 6.5 WordPress Modal Window – create popup modal window plugin <= 6.0.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-35634 Medium 4.9 Woocommerce – Recent Purchases plugin <= 1.0.1 - File Inclusion vulnerability 0.5%
  • CVE-2024-35629 Critical 9.6 WordPress Easy Digital Downloads – Recent Purchases plugin <= 1.0.2 - Remote File Inclusion vulnerability 0.5%
  • CVE-2023-52149 Medium 5.4 WordPress Floating Button Plugin <= 6.0 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
  • CVE-2023-49155 Medium 4.3 WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-27418 Medium 4.3 WordPress Side Menu Lite Plugin <= 4.0 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-25443 Medium 4.3 WordPress Button Generator – easily Button Builder Plugin <= 2.3.5 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
  • CVE-2023-27452 Medium 5.9 WordPress Button Generator – easily Button Builder Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-23984 Medium 5.4 WordPress Bubble Menu – circle floating menu Plugin <= 3.0.1 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
  • CVE-2022-29447 Medium 6.8 WordPress Hover Effects plugin <= 2.1 - Authenticated Local File Inclusion (LFI) vulnerability 1.0%
  • CVE-2022-29448 Medium 6.8 WordPress Herd Effects plugin <= 5.2 - Local File Inclusion (LFI) vulnerability 1.0%
  • CVE-2022-29446 Medium 6.8 WordPress Counter Box plugin <= 1.1.1 - Authenticated Local File Inclusion (LFI) vulnerability 1.0%
  • CVE-2022-29445 Medium 6.8 WordPress Popup Box plugin <= 2.1.2 - Authenticated Local File Inclusion (LFI) vulnerability 1.1%