CVE-2024-3481: Wow-Company Counter Box

Medium severity, CVSS 5.2. EPSS: 0.3% chance of exploitation in the next 30 days.

The Counter Box WordPress plugin before 1.2.4 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such deleting counters via CSRF attacks

Affected products

• Wow-Company Counter Box: before 1.2.4 (fixed in 1.2.4)

Published 2024-05-02. Last modified 2026-06-17.