Read the docs

Wow-Company

Records61All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high23CVSS 7.0–8.9

Exploited now

Wow-Company records in CISA KEV

No Wow-Company vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Modal Window 7 records LOW Counter Box 6 records MEDIUM Button Generator 5 records MEDIUM Wp Coder 5 records MEDIUM Herd Effects 4 records MEDIUM Bubble Menu 3 records MEDIUM Float Menu 3 records MEDIUM Side Menu Lite 3 records HIGH

Records

5 records in Button Generator · all components

TI-2023-02217 CVE-2023-2362 · GHSA-vx6w-q89v-7755

Multiple Plugins from Wow-Company - Reflected XSS

Priority MEDIUM 60

The Float menu WordPress plugin before 5.0.2, Bubble Menu WordPress plugin before 3.0.4, Button Generator WordPress plugin before 2.3.5, Calculator Builder WordPress plugin before 1.5.1, Counter Box WordPress plugin befo…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2023-06-12 Fixed in 5.0.2, 3.0.4 +9
TI-2021-07330 CVE-2021-25052 · GHSA-qgxx-xcvx-3pp5

Button Generator < 2.3.3 - RFI leading to RCE via CSRF

Priority MEDIUM 44

The Button Generator WordPress plugin before 2.3.3 within the wow-company admin menu page allows to include() arbitrary file with PHP extension (as well as with data:// or http:// protocols), thus leading to CSRF RCE.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03032 Published 2022-01-10 Fixed in 2.3.3 CWE-352
TI-2024-03236 CVE-2024-3471 · GHSA-p6qv-frqj-63r6

Button Generator < 3.0 - Button Deletion via CSRF

Priority LOW 16

The Button Generator WordPress plugin before 3.0 does not have CSRF check in place when bulk deleting, which could allow attackers to make a logged in admin delete buttons via a CSRF attack

CVSS 3.1LOW 3.4 Network High privileges User interaction EPSS 0.00229 Published 2024-05-02 Fixed in 3.0 CWE-352
Open these records in search →