wpcalc vulnerabilities
8 published CVEs name wpcalc among the affected products.
- 8Published CVEs8 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-12115
Counter Box <= 2.0.13 - Authenticated (Administrator+) PHP Object Injection via Import
wpcalc · Counter Box – Add Countdowns, Timers & Dynamic Counters to WordPress
Medium6.6 - CVE-2025-12122
Popup Box – Easily Create WordPress Popups <= 3.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
wpcalc · Popup Box – Easily Create WordPress Popups
Medium6.4 - CVE-2024-13901
Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site <= 2.0.6 - Authenticated (Administrator+) DOM-Based Stored Cross-Site Scripting
wpcalc · Counter Box – Add Countdowns, Timers & Dynamic Counters to WordPress
Medium4.4 - CVE-2025-0897
Modal Window <= 6.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via iframeBox Shortcode
wpcalc · Modal Window – create popup modal window
Medium6.4 - CVE-2024-2457
Modal Window – create popup modal window <= 5.3.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
wpcalc · Modal Window – create popup modal window
Medium6.4 - CVE-2024-0703
Sticky Buttons <= 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
wpcalc · Sticky Buttons – Floating Buttons Builder
Medium4.4 - CVE-2023-5161
Modal Window <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
wpcalc · Modal Window – create popup modal window
Medium6.4 - CVE-2023-0895
WP Coder – add custom html, css and js code <= 2.5.3 - Authenticated (Admin+) SQL Injection
wpcalc · WP Coder – Insert & Manage Code Snippets
High7.2