Skip to content
OpenAdvisories

Vendor

codeworkweb

4 known vulnerabilities.

Products

CWW Companion 2 CWW Portfolio 1 Xews Lite 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2025-39359

    WordPress CWW Portfolio theme <= 1.3.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in codeworkweb CWW Portfolio cww-portfolio allows PHP Local File Inclusion.This issue affects CWW Portfolio: from n/a through <= 1.3.1.

    codeworkweb CWW Portfolio
  • High 7.5
    CVE-2025-39383

    WordPress Xews Lite plugin <= 1.0.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in codeworkweb Xews Lite xews-lite allows PHP Local File Inclusion.This issue affects Xews Lite: from n/a through <= 1.0.9.

    codeworkweb Xews Lite