Skip to content
OpenAdvisories

Vendor

Wow-Company

28 known vulnerabilities.

Products

Button Generator – easily Button Builder 5 Modal Window 2 Bubble Menu – circle floating menu 2 Wow Viral Signups 1 Float menu 1 Popup Box 1 WP Coder 1 Sticky Buttons 1 Counter Box 1 Side Menu Lite – add sticky fixed buttons 1 Herd Effects (WordPress plugin) 1 Wow Forms 1 Counter Box (WordPress) 1 Hover Effects – easily create any hover effect (WordPress plugin) 1 Popup Box (WordPress plugin) 1 Herd Effects 1 Woocommerce – Recent Purchases 1 Side Menu Lite 1 Calculator Builder 1 Easy Digital Downloads – Recent Purchases 1 Floating Button 1 Hover Effects 1
All Critical High Medium Low Exploited only Public exploit

22 results · Clear filters · Feed

  • Medium 5.4
    CVE-2025-30912

    WordPress Float menu plugin <= 6.1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Float menu float-menu allows Cross Site Request Forgery.This issue affects Float menu: from n/a through <= 6.1.2.

    Wow-Company Float menu
  • Medium 5.4
    CVE-2025-24724

    WordPress Side Menu Lite Plugin <= 5.3.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Side Menu Lite side-menu-lite allows Cross Site Request Forgery.This issue affects Side Menu Lite: from n/a through <= 5.3.1.

    Wow-Company Side Menu Lite
  • Medium 5.4
    CVE-2025-24716

    WordPress Herd Effects Plugin <= 6.2.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Herd Effects mwp-herd-effect allows Cross Site Request Forgery.This issue affects Herd Effects: from n/a through <= 6.2.1.

    Wow-Company Herd Effects
  • Medium 5.4
    CVE-2025-24717

    WordPress Modal Window Plugin <= 6.1.4 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Modal Window modal-window allows Cross Site Request Forgery.This issue affects Modal Window: from n/a through <= 6.1.4.

    Wow-Company Modal Window
  • Medium 5.4
    CVE-2025-24715

    WordPress Counter Box Plugin <= 2.0.5 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Counter Box counter-box allows Cross Site Request Forgery.This issue affects Counter Box: from n/a through <= 2.0.5.

    Wow-Company Counter Box
  • Medium 5.4
    CVE-2025-24713

    WordPress Button Generator – easily Button Builder Plugin <= 3.1.1 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Button Generator – easily Button Builder button-generation allows Cross Site Request Forgery.This issue affects Button Generator – easily Button Builder: from n/a through <= 3.1.1.

    Wow-Company Button Generator – easily Button Builder
  • Medium 5.4
    CVE-2025-24720

    WordPress Sticky Buttons Plugin <= 4.1.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Sticky Buttons sticky-buttons allows Cross Site Request Forgery.This issue affects Sticky Buttons: from n/a through <= 4.1.1.

    Wow-Company Sticky Buttons
  • Medium 5.4
    CVE-2025-24711

    WordPress Popup Box Plugin <= 3.2.4 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Popup Box popup-box allows Cross Site Request Forgery.This issue affects Popup Box: from n/a through <= 3.2.4.

    Wow-Company Popup Box
  • Medium 5.4
    CVE-2025-24714

    WordPress Bubble Menu Plugin <= 4.0.2 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Bubble Menu – circle floating menu bubble-menu allows Cross Site Request Forgery.This issue affects Bubble Menu – circle floating menu: from n/a through <= 4.0.2.

    Wow-Company Bubble Menu – circle floating menu
  • Medium 5.3
    CVE-2023-49154

    WordPress Button Generator – easily Button Builder plugin <= 2.3.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Wow-Company Button Generator – easily Button Builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Button Generator – easily Button Builder: from n/a through 2.3.8.

    Wow-Company Button Generator – easily Button Builder
  • Medium 6.5
    CVE-2024-43346

    WordPress Modal Window – create popup modal window plugin <= 6.0.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wow-Company Modal Window allows Stored XSS.This issue affects Modal Window: from n/a through 6.0.3.

    Wow-Company Modal Window
  • Medium 4.9
    CVE-2024-35634

    Woocommerce – Recent Purchases plugin <= 1.0.1 - File Inclusion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Wow-Company Woocommerce – Recent Purchases allows PHP Local File Inclusion.This issue affects Woocommerce – Recent Purchases: from n/a through 1.0.1.

    Wow-Company Woocommerce – Recent Purchases Web / CMS
  • Medium 5.4
    CVE-2023-52149

    WordPress Floating Button Plugin <= 6.0 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Floating Button.This issue affects Floating Button: from n/a through 6.0.

    Wow-Company Floating Button
  • Medium 4.3
    CVE-2023-49155

    WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Button Generator – easily Button Builder.This issue affects Button Generator – easily Button Builder: from n/a through 2.3.8.

    Wow-Company Button Generator – easily Button Builder
  • Medium 4.3
    CVE-2023-27418

    WordPress Side Menu Lite Plugin <= 4.0 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Side Menu Lite – add sticky fixed buttons plugin <= 4.0 versions.

    Wow-Company Side Menu Lite – add sticky fixed buttons
  • Medium 4.3
    CVE-2023-25443

    WordPress Button Generator – easily Button Builder Plugin <= 2.3.5 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Button Generator – easily Button Builder plugin <= 2.3.5 versions.

    Wow-Company Button Generator – easily Button Builder
  • Medium 5.9
    CVE-2023-27452

    WordPress Button Generator – easily Button Builder Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wow-Company Button Generator – easily Button Builder plugin <= 2.3.3 versions.

    Wow-Company Button Generator – easily Button Builder
  • Medium 5.4
    CVE-2023-23984

    WordPress Bubble Menu – circle floating menu Plugin <= 3.0.1 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Bubble Menu – circle floating menu plugin <= 3.0.1 leading to form deletion.

    Wow-Company Bubble Menu – circle floating menu
  • Medium 6.8
    CVE-2022-29447

    WordPress Hover Effects plugin <= 2.1 - Authenticated Local File Inclusion (LFI) vulnerability

    Authenticated (administrator or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company's Hover Effects plugin <= 2.1 at WordPress.

    Wow-Company Hover Effects – easily create any hover effect (WordPress plugin) Web / CMS
  • Medium 6.8
    CVE-2022-29448

    WordPress Herd Effects plugin <= 5.2 - Local File Inclusion (LFI) vulnerability

    Authenticated (admin or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company's Herd Effects plugin <= 5.2 at WordPress.

    Wow-Company Herd Effects (WordPress plugin) Web / CMS
  • Medium 6.8
    CVE-2022-29446

    WordPress Counter Box plugin <= 1.1.1 - Authenticated Local File Inclusion (LFI) vulnerability

    Authenticated (administrator or higher role) Local File Inclusion (LFI) vulnerability in Wow-Company's Counter Box plugin <= 1.1.1 at WordPress.

    Wow-Company Counter Box (WordPress) Web / CMS
  • Medium 6.8
    CVE-2022-29445

    WordPress Popup Box plugin <= 2.1.2 - Authenticated Local File Inclusion (LFI) vulnerability

    Authenticated (administrator or higher role) Local File Inclusion (LFI) vulnerability in Wow-Company's Popup Box plugin <= 2.1.2 at WordPress.

    Wow-Company Popup Box (WordPress plugin) Web / CMS