Skip to content
OpenAdvisories

Vendor

codelessthemes

4 known vulnerabilities.

Products

Cowidgets – Elementor Addons 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-8960

    Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    The Cowidgets – Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenti…

    codelessthemes Cowidgets – Elementor Addons Web / CMS
  • Medium 5.3
    CVE-2024-10779

    Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Contributor+) Post Disclosure

    The Cowidgets – Elementor Addons plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.0 via the 'ce_template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for…

    codelessthemes Cowidgets – Elementor Addons Web / CMS
  • Medium 6.4
    CVE-2024-4697

    Cowidgets – Elementor Addons <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via heading_tag Parameter

    The Cowidgets – Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘heading_tag’ parameter in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping. This makes it possible f…

    codelessthemes Cowidgets – Elementor Addons Web / CMS