Vulnerabilities > WOW Company > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-01-10 | CVE-2021-25054 | Unspecified vulnerability in Wow-Company Wpcalc 2.1 The WPcalc WordPress plugin through 2.1 does not sanitize user input into the 'did' parameter and uses it in a SQL statement, leading to an authenticated SQL Injection vulnerability. | 8.8 |
| 2021-11-08 | CVE-2021-24628 | SQL Injection vulnerability in Wow-Company WOW Forms 3.1.3 The Wow Forms WordPress plugin through 3.1.3 does not sanitise or escape a 'did' GET parameter before using it in a SQL statement, when deleting a form in the admin dashboard, leading to an authenticated SQL injection | 7.2 |