Codeless
Products
2- 8 CVEs
- 6 CVEs
Recent CVEs
14| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-5179 | Hig | 0.57 | 8.8 | 0.01 | Jun 6, 2024 | The Cowidgets – Elementor Addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.2 via the 'item_style' and 'style' parameters. This makes it possible for authenticated attackers, with Contributor-level access and above, to… | ||
| CVE-2016-6578 | Hig | 0.57 | 8.8 | 0.01 | Jul 13, 2018 | CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains a global cross-site request forgery (CSRF) vulnerability. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious… | ||
| CVE-2024-53786 | Med | 0.42 | 6.5 | 0.00 | Nov 30, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codeless Cowidgets – Elementor Addons cowidgets-elementor-addons allows Stored XSS.This issue affects Cowidgets – Elementor Addons: from n/a through <= 1.2.0. | ||
| CVE-2024-4697 | Med | 0.42 | 6.4 | 0.00 | Jun 4, 2024 | The Cowidgets – Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘heading_tag’ parameter in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping. This makes it possible for… | ||
| CVE-2025-26127 | Med | 0.33 | 5.0 | 0.00 | Mar 17, 2025 | A stored cross-site scripting (XSS) vulnerability in the Send for Approval function of FileCloud v23.241.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. | ||
| CVE-2022-25241 | 0.03 | — | 0.03 | Feb 16, 2022 | In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF). | |||
| CVE-2022-39833 | 0.01 | — | 0.03 | Nov 23, 2022 | FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API endpoints via a crafted HTTP request. | |||
| CVE-2024-8960 | 0.00 | — | 0.00 | Nov 9, 2024 | The Cowidgets – Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,… | |||
| CVE-2024-37419 | 0.00 | — | 0.01 | Jul 9, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Codeless Cowidgets – Elementor Addons allows Path Traversal.This issue affects Cowidgets – Elementor Addons: from n/a through 1.1.1. | |||
| CVE-2024-35782 | 0.00 | — | 0.00 | Jun 4, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Codeless Cowidgets – Elementor Addons allows Stored XSS.This issue affects Cowidgets – Elementor Addons: from n/a through 1.1.1. | |||
| CVE-2022-1958 | 0.00 | — | 0.01 | Jun 15, 2022 | A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. Upgrading to version 21.3.5.18513 is able to… | |||
| CVE-2022-24633 | 0.00 | — | 0.01 | Feb 22, 2022 | All versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability exists in the parameter "path" passing "/SHARED/". A malicious actor could identify the existence of users by requesting share information on specified share paths. | |||
| CVE-2022-25242 | 0.00 | — | 0.00 | Feb 16, 2022 | In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF). | |||
| CVE-2020-26524 | 0.00 | — | 0.01 | Oct 2, 2020 | CodeLathe FileCloud before 20.2.0.11915 allows username enumeration. |
- risk 0.57cvss 8.8epss 0.01
The Cowidgets – Elementor Addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.2 via the 'item_style' and 'style' parameters. This makes it possible for authenticated attackers, with Contributor-level access and above, to…
- risk 0.57cvss 8.8epss 0.01
CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains a global cross-site request forgery (CSRF) vulnerability. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious…
- risk 0.42cvss 6.5epss 0.00
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codeless Cowidgets – Elementor Addons cowidgets-elementor-addons allows Stored XSS.This issue affects Cowidgets – Elementor Addons: from n/a through <= 1.2.0.
- risk 0.42cvss 6.4epss 0.00
The Cowidgets – Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘heading_tag’ parameter in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping. This makes it possible for…
- risk 0.33cvss 5.0epss 0.00
A stored cross-site scripting (XSS) vulnerability in the Send for Approval function of FileCloud v23.241.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
- CVE-2022-25241Feb 16, 2022risk 0.03cvss —epss 0.03
In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF).
- CVE-2022-39833Nov 23, 2022risk 0.01cvss —epss 0.03
FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API endpoints via a crafted HTTP request.
- CVE-2024-8960Nov 9, 2024risk 0.00cvss —epss 0.00
The Cowidgets – Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…
- CVE-2024-37419Jul 9, 2024risk 0.00cvss —epss 0.01
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Codeless Cowidgets – Elementor Addons allows Path Traversal.This issue affects Cowidgets – Elementor Addons: from n/a through 1.1.1.
- CVE-2024-35782Jun 4, 2024risk 0.00cvss —epss 0.00
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Codeless Cowidgets – Elementor Addons allows Stored XSS.This issue affects Cowidgets – Elementor Addons: from n/a through 1.1.1.
- CVE-2022-1958Jun 15, 2022risk 0.00cvss —epss 0.01
A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. Upgrading to version 21.3.5.18513 is able to…
- CVE-2022-24633Feb 22, 2022risk 0.00cvss —epss 0.01
All versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability exists in the parameter "path" passing "/SHARED/". A malicious actor could identify the existence of users by requesting share information on specified share paths.
- CVE-2022-25242Feb 16, 2022risk 0.00cvss —epss 0.00
In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF).
- CVE-2020-26524Oct 2, 2020risk 0.00cvss —epss 0.01
CodeLathe FileCloud before 20.2.0.11915 allows username enumeration.