VendorsWow-Companymodal_windowany version
Vulnerabilities

Wow-Company Modal Window any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2021-25051
Modal Window < 5.2.2 - RFI leading to RCE via CSRF
Published 2022-01-10 · Modified
8.8EPSS 0.008
CVE-2025-24717
WordPress Modal Window Plugin <= 6.1.4 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
Published 2025-01-24 · Modified
8.8EPSS 0.002
CVE-2024-43346
WordPress Modal Window – create popup modal window plugin <= 6.0.3 - Cross Site Scripting (XSS) vulnerability
Published 2024-08-18 · Analyzed
6.5EPSS 0.003
CVE-2023-5161
Modal Window <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2023-09-26 · Modified
6.4EPSS 0.006
CVE-2024-2457
Modal Window – create popup modal window <= 5.3.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2024-04-09 · Modified
6.4EPSS 0.003
CVE-2025-0897
Modal Window <= 6.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via iframeBox Shortcode
Published 2025-02-20 · Analyzed
6.4EPSS 0.003
CVE-2024-3472
Modal Window < 5.3.10 - Modal Deletion via CSRF
Published 2024-05-02 · Analyzed
5.9EPSS 0.002