wpcalc vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20242
3. 20252
4. 20262

Newest CVEs

• CVE-2026-12115

  Counter Box <= 2.0.13 - Authenticated (Administrator+) PHP Object Injection via Import

  wpcalc · Counter Box – Add Countdowns, Timers & Dynamic Counters to WordPress

  Medium6.6
• CVE-2025-12122

  Popup Box – Easily Create WordPress Popups <= 3.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting

  wpcalc · Popup Box – Easily Create WordPress Popups

  Medium6.4
• CVE-2024-13901

  Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site <= 2.0.6 - Authenticated (Administrator+) DOM-Based Stored Cross-Site Scripting

  wpcalc · Counter Box – Add Countdowns, Timers & Dynamic Counters to WordPress

  Medium4.4
• CVE-2025-0897

  Modal Window <= 6.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via iframeBox Shortcode

  wpcalc · Modal Window – create popup modal window

  Medium6.4
• CVE-2024-2457

  Modal Window – create popup modal window <= 5.3.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

  wpcalc · Modal Window – create popup modal window

  Medium6.4
• CVE-2024-0703

  Sticky Buttons <= 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting

  wpcalc · Sticky Buttons – Floating Buttons Builder

  Medium4.4
• CVE-2023-5161

  Modal Window <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  wpcalc · Modal Window – create popup modal window

  Medium6.4
• CVE-2023-0895

  WP Coder – add custom html, css and js code <= 2.5.3 - Authenticated (Admin+) SQL Injection

  wpcalc · WP Coder – Insert & Manage Code Snippets

  High7.2