Codeless records

7 published records for vendor codeless.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 14.3%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2024-5179No exploit	Cowidgets – Elementor Addons <= 1.1.2 - Authenticated (Contributor+) Local File Inclusioncodeless · cowidgets elementor addons · CWE-22 RCE Path traversal	High8.8	—	0.9%	Jun 5, 2024
35Monitor	CVE-2024-37419No exploit	WordPress Cowidgets – Elementor Addons plugin <= 1.1.1 - Local File Inclusion vulnerabilitycodeless · cowidgets · CWE-22 Path traversal	High8.8	—	0.6%	Jul 9, 2024
21Monitor	CVE-2024-4697No exploit	Cowidgets – Elementor Addons <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via heading_tag Parametercodeless · cowidgets elementor addons · CWE-79 XSS	Medium5.4	—	0.3%	Jun 4, 2024
21Monitor	CVE-2024-8960No exploit	Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadcodeless · cowidgets elementor addons · CWE-79 XSS	Medium5.4	—	0.3%	Nov 8, 2024
21Monitor	CVE-2024-53786No exploit	WordPress Cowidgets – Elementor Addons plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerabilitycodeless · cowidgets elementor addons · CWE-79 XSS	Medium5.4	—	0.3%	Nov 30, 2024
21Monitor	CVE-2024-35782No exploit	WordPress Cowidgets – Elementor Addons plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerabilitycodeless · cowidgets - elementor · CWE-79 XSS	Medium5.4	—	0.2%	Jun 4, 2024
17Monitor	CVE-2024-10779No exploit	Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Contributor+) Post Disclosurecodeless · cowidgets elementor addons · CWE-639 Broken access control (IDOR)	Medium4.3	—	0.3%	Nov 8, 2024

CVE-2024-5179
35Monitor
Cowidgets – Elementor Addons <= 1.1.2 - Authenticated (Contributor+) Local File Inclusion
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Path traversal
codeless · cowidgets elementor addonsJun 5, 2024
CVE-2024-37419
35Monitor
WordPress Cowidgets – Elementor Addons plugin <= 1.1.1 - Local File Inclusion vulnerability
HighCVSS 8.8No exploitEPSS 1%
- Path traversal
codeless · cowidgetsJul 9, 2024
CVE-2024-4697
21Monitor
Cowidgets – Elementor Addons <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via heading_tag Parameter
MediumCVSS 5.4No exploitEPSS 0%
- XSS
codeless · cowidgets elementor addonsJun 4, 2024
CVE-2024-8960
21Monitor
Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
MediumCVSS 5.4No exploitEPSS 0%
- XSS
codeless · cowidgets elementor addonsNov 8, 2024
CVE-2024-53786
21Monitor
WordPress Cowidgets – Elementor Addons plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%
- XSS
codeless · cowidgets elementor addonsNov 30, 2024
CVE-2024-35782
21Monitor
WordPress Cowidgets – Elementor Addons plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%
- XSS
codeless · cowidgets - elementorJun 4, 2024
CVE-2024-10779
17Monitor
Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Contributor+) Post Disclosure
MediumCVSS 4.3No exploitEPSS 0%
- Broken access control (IDOR)
codeless · cowidgets elementor addonsNov 8, 2024