Vulnerabilities in codeworkweb

4 results

CVE-2025-39383HIGHWordPress Xews Lite plugin <= 1.0.9 - Local File Inclusion vulnerabilityEPSS 0.6%CVE-2025-39359HIGHWordPress CWW Portfolio theme <= 1.3.1 - Local File Inclusion vulnerabilityEPSS 0.6%CVE-2024-2130MEDIUMCWW Companion <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-67473MEDIUMWordPress CWW Companion plugin <= 1.3.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%