PatchTheCVEwow-company vulnerabilities
Recent CVEs affecting wow-company products. 7 tracked.
wow-company has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 7. Most recent: 2025-03-01. Highest priority: CVE-2024-6926 (score 66/100).
- CVE-2025-24717 MEDIUM 5.4 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Modal Window modal-window allows Cross Site Req
- CVE-2025-24715 MEDIUM 5.4 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Counter Box counter-box allows Cross Site Reque
- CVE-2025-0897 MEDIUM 6.4 UPGRADE The Modal Window – create popup modal window plugin for WordPress is vulnerable to Stored Cross-Site Scripting
- CVE-2024-6927 MEDIUM 4.8 UPGRADE The Viral Signup WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could
- CVE-2024-6926 CRITICAL 9.8 UPGRADE The Viral Signup WordPress plugin through 2.1 does not properly sanitise and escape a parameter before using
- CVE-2024-43346 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in W
- CVE-2024-13901 MEDIUM 4.4 UPGRADE The Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site plugin for WordPress is vul
FAQ
How do I fix wow-company vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wow-company being exploited right now?
None of the tracked wow-company CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wow-company CVE should I patch first?
CVE-2024-6926 currently ranks highest (66/100): The Viral Signup WordPress plugin through 2.1 does not properly sanitise and escape a parameter before using .