Vulnerabilities in wpcalc
8 resultsCVE-2023-0895HIGHWP Coder – add custom html, css and js code <= 2.5.3 - Authenticated (Admin+) SQL InjectionEPSS 0.8%CVE-2023-5161MEDIUMModal Window <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.6%CVE-2026-12115MEDIUMCounter Box <= 2.0.13 - Authenticated (Administrator+) PHP Object Injection via ImportEPSS 0.5%CVE-2024-2457MEDIUMModal Window – create popup modal window <= 5.3.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2024-0703MEDIUMSticky Buttons <= 3.2.2 - Authenticated (Admin+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-0897MEDIUMModal Window <= 6.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via iframeBox ShortcodeEPSS 0.3%CVE-2024-13901MEDIUMCounter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site <= 2.0.6 - Authenticated (Administrator+) DOM-Based Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-12122MEDIUMPopup Box – Easily Create WordPress Popups <= 3.2.12 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%