Log in Start free

codeworkweb

Products

ProductCVEsExploitedLatest
CWW Companion2–Dec 9, 2025
CWW Portfolio1–Apr 24, 2025
Xews Lite1–Apr 24, 2025

Exploited and recent CVEs

  • CVE-2025-67473 Medium 4.3 WordPress CWW Companion plugin <= 1.3.2 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-39359 High 7.5 WordPress CWW Portfolio theme <= 1.3.1 - Local File Inclusion vulnerability 0.8%
  • CVE-2025-39383 High 7.5 WordPress Xews Lite plugin <= 1.0.9 - Local File Inclusion vulnerability 0.8%
  • CVE-2024-2130 Medium 6.4 CWW Companion <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%