# cve.now: Wow-company

The newest entries naming Wow-company as an affected vendor (up to 200), of 28 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2017-20245](https://cve.now/CVE-2017-20245.md): Wow Viral Signups 2.1 WordPress Plugin SQL Injection (CVSS 8.8)
- [CVE-2017-20244](https://cve.now/CVE-2017-20244.md): Wow Forms WordPress Plugin 2.1 SQL Injection (CVSS 8.8)
- [CVE-2025-53258](https://cve.now/CVE-2025-53258.md): WordPress Hover Effects plugin \<= 2.1.2 - SQL Injection Vulnerability (CVSS 7.6)
- [CVE-2025-30912](https://cve.now/CVE-2025-30912.md): WordPress Float menu plugin \<= 6.1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability (CVSS 5.4)
- [CVE-2025-26760](https://cve.now/CVE-2025-26760.md): WordPress Calculator Builder plugin \<= 1.6.2 - Local File Inclusion vulnerability (CVSS 7.5)
- [CVE-2025-24699](https://cve.now/CVE-2025-24699.md): WordPress WP Coder Plugin \<= 3.6 - CSRF to Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-24724](https://cve.now/CVE-2025-24724.md): WordPress Side Menu Lite Plugin \<= 5.3.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability (CVSS 5.4)
- [CVE-2025-24716](https://cve.now/CVE-2025-24716.md): WordPress Herd Effects Plugin \<= 6.2.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability (CVSS 5.4)
- [CVE-2025-24717](https://cve.now/CVE-2025-24717.md): WordPress Modal Window Plugin \<= 6.1.4 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability (CVSS 5.4)
- [CVE-2025-24715](https://cve.now/CVE-2025-24715.md): WordPress Counter Box Plugin \<= 2.0.5 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability (CVSS 5.4)
- [CVE-2025-24713](https://cve.now/CVE-2025-24713.md): WordPress Button Generator – easily Button Builder Plugin \<= 3.1.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4)
- [CVE-2025-24720](https://cve.now/CVE-2025-24720.md): WordPress Sticky Buttons Plugin \<= 4.1.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability (CVSS 5.4)
- [CVE-2025-24711](https://cve.now/CVE-2025-24711.md): WordPress Popup Box Plugin \<= 3.2.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4)
- [CVE-2025-24714](https://cve.now/CVE-2025-24714.md): WordPress Bubble Menu Plugin \<= 4.0.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4)
- [CVE-2023-49154](https://cve.now/CVE-2023-49154.md): WordPress Button Generator – easily Button Builder plugin \<= 2.3.8 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2024-43346](https://cve.now/CVE-2024-43346.md): WordPress Modal Window – create popup modal window plugin \<= 6.0.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-35634](https://cve.now/CVE-2024-35634.md): Woocommerce – Recent Purchases plugin \<= 1.0.1 - File Inclusion vulnerability (CVSS 4.9)
- [CVE-2024-35629](https://cve.now/CVE-2024-35629.md): WordPress Easy Digital Downloads – Recent Purchases plugin \<= 1.0.2 - Remote File Inclusion vulnerability (CVSS 9.6)
- [CVE-2023-52149](https://cve.now/CVE-2023-52149.md): WordPress Floating Button Plugin \<= 6.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4)
- [CVE-2023-49155](https://cve.now/CVE-2023-49155.md): WordPress Button Generator – easily Button Builder Plugin \<= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3)
- [CVE-2023-27418](https://cve.now/CVE-2023-27418.md): WordPress Side Menu Lite Plugin \<= 4.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3)
- [CVE-2023-25443](https://cve.now/CVE-2023-25443.md): WordPress Button Generator – easily Button Builder Plugin \<= 2.3.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3)
- [CVE-2023-27452](https://cve.now/CVE-2023-27452.md): WordPress Button Generator – easily Button Builder Plugin \<= 2.3.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9)
- [CVE-2023-23984](https://cve.now/CVE-2023-23984.md): WordPress Bubble Menu – circle floating menu Plugin \<= 3.0.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4)
- [CVE-2022-29447](https://cve.now/CVE-2022-29447.md): WordPress Hover Effects plugin \<= 2.1 - Authenticated Local File Inclusion (LFI) vulnerability (CVSS 6.8)
- [CVE-2022-29448](https://cve.now/CVE-2022-29448.md): WordPress Herd Effects plugin \<= 5.2 - Local File Inclusion (LFI) vulnerability (CVSS 6.8)
- [CVE-2022-29446](https://cve.now/CVE-2022-29446.md): WordPress Counter Box plugin \<= 1.1.1 - Authenticated Local File Inclusion (LFI) vulnerability (CVSS 6.8)
- [CVE-2022-29445](https://cve.now/CVE-2022-29445.md): WordPress Popup Box plugin \<= 2.1.2 - Authenticated Local File Inclusion (LFI) vulnerability (CVSS 6.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/wow
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.