codelessthemes

Products

ProductCVEsExploitedLatest
Cowidgets – Elementor Addons4–Nov 9, 2024

Exploited and recent CVEs

  • CVE-2024-8960 Medium 6.4 Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
  • CVE-2024-10779 Medium 5.3 Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Contributor+) Post Disclosure 0.3%
  • CVE-2024-5179 High 8.8 Cowidgets – Elementor Addons <= 1.1.2 - Authenticated (Contributor+) Local File Inclusion 0.9%
  • CVE-2024-4697 Medium 6.4 Cowidgets – Elementor Addons <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via heading_tag Parameter 0.3%