High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-18	CVE-2023-49155	Unspecified vulnerability in Wow-Company Button Generator Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Button Generator – easily Button Builder.This issue affects Button Generator – easily Button Builder: from n/a through 2.3.8. network low complexity wow-company	8.8
2022-01-10	CVE-2021-25052	Unspecified vulnerability in Wow-Company Button Generator The Button Generator WordPress plugin before 2.3.3 within the wow-company admin menu page allows to include() arbitrary file with PHP extension (as well as with data:// or http:// protocols), thus leading to CSRF RCE. network low complexity wow-company	8.8