Codeworkweb

4 CVEs across 4 Codeworkweb products. Browse Codeworkweb vulnerabilities, severities, and proof-of-concept exploits.

Codeworkweb products with known CVEs

ProductCVEs
Cww Companion2
Cww Companion1
Cww Portfolio1
Xews Lite1
Codeworkweb CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-67473Medium4.32025-12-09Cross-Site Request Forgery (CSRF) vulnerability in codeworkweb CWW Companion cww-companion allows Cross Site Request Forgery.This issue affects CWW Companion…
CVE-2025-39383High7.52025-04-24Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in codeworkweb Xews Lite xews-lite allows…
CVE-2025-39359High7.52025-04-24Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in codeworkweb CWW Portfolio cww-portfoli…
CVE-2024-2130Medium6.42024-03-12The CWW Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Module2 widget in all versions up to, and including, 1.2.7 due to i…