Wow-Company Vulnerabilities and Affected Products
Vulnerabilities associated with viral-signup.
Products
Clear product- Button Generator – easily Button Builder5 vulnerabilities
- Bubble Menu – circle floating menu2 vulnerabilities
- Modal Window2 vulnerabilities
- viral-signup2 vulnerabilities
- button_generator1 vulnerability
- Calculator Builder1 vulnerability
- Counter Box1 vulnerability
- Counter Box (WordPress)1 vulnerability
- Easy Digital Downloads – Recent Purchases1 vulnerability
- Float menu1 vulnerability
- float_menu1 vulnerability
- Floating Button1 vulnerability
- Herd Effects1 vulnerability
- Herd Effects (WordPress plugin)1 vulnerability
- Hover Effects1 vulnerability
- Hover Effects – easily create any hover effect (WordPress plugin)1 vulnerability
- Popup Box1 vulnerability
- Popup Box (WordPress plugin)1 vulnerability
- Side Menu Lite1 vulnerability
- Side Menu Lite – add sticky fixed buttons1 vulnerability
- side_menu_lite1 vulnerability
- Sticky Buttons1 vulnerability
- Woocommerce – Recent Purchases1 vulnerability
- Wow Forms1 vulnerability
- Wow Viral Signups1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-6926CRITICAL | Viral Signup <= 2.1 - Unauthenticated SQLiThe Viral Signup WordPress plugin through 2.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection | CVSS9.8v3.1 | EPSS3.29% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |
CVE-2024-6927MEDIUM | Viral Signup <= 2.1 - Admin+ Stored XSSThe Viral Signup WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) CWE-79Aug 29, 2024 | CVSS4.8v3.1 | EPSS0.373% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |