wpcalc
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Modal Window – create popup modal window | 3 | – | Feb 20, 2025 |
| Counter Box – Add Countdowns, Timers & Dynamic Counters to WordPress | 2 | – | Jun 17, 2026 |
| Popup Box – Easily Create WordPress Popups | 1 | – | Feb 18, 2026 |
| Sticky Buttons – Floating Buttons Builder | 1 | – | Jan 23, 2024 |
| WP Coder – Insert & Manage Code Snippets | 1 | – | Feb 17, 2023 |
Exploited and recent CVEs
- CVE-2026-12115 Counter Box <= 2.0.13 - Authenticated (Administrator+) PHP Object Injection via Import 0.5%
- CVE-2025-12122 Popup Box – Easily Create WordPress Popups <= 3.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
- CVE-2024-13901 Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site <= 2.0.6 - Authenticated (Administrator+) DOM-Based Stored Cross-Site Scripting 0.3%
- CVE-2025-0897 Modal Window <= 6.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via iframeBox Shortcode 0.3%
- CVE-2024-2457 Modal Window – create popup modal window <= 5.3.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
- CVE-2024-0703 Sticky Buttons <= 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting 0.3%
- CVE-2023-5161 Modal Window <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.7%
- CVE-2023-0895 WP Coder – add custom html, css and js code <= 2.5.3 - Authenticated (Admin+) SQL Injection 0.8%