CVE-2024-4564 CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

🗓️ 12 Jun 2024 03:33:14Reported by WordfenceType

CoDesigner WooCommerce Builder for Elementor plugin v4.4.1 Authenticated Stored XSS vulnerability

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress plugin CoDesigner WooCommerce Builder for Elementor security vulnerability	12 Jun 202400:00	–	cnnvd
CVE	CVE-2024-4564	12 Jun 202403:33	–	cve
EUVD	EUVD-2024-44176	3 Oct 202520:07	–	euvd
NVD	CVE-2024-4564	12 Jun 202404:15	–	nvd
Patchstack	Wordpress CoDesigner plugin <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets vulnerability	11 Jun 202416:26	–	patchstack
Patchstack	WordPress CoDesigner WooCommerce Builder for Elementor Plugin <= 4.4.1 is vulnerable to Cross Site Scripting (XSS)	11 Jun 202400:00	–	patchstack
RedhatCVE	CVE-2024-4564	23 May 202508:55	–	redhatcve
Vulnrichment	CVE-2024-4564 CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets	12 Jun 202403:33	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 10, 2024 to June 16, 2024)	20 Jun 202413:40	–	wordfence
WPVulnDB	CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More < 4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets	11 Jun 202400:00	–	wpvulndb

[
  {
    "vendor": "codexpert",
    "product": "CoDesigner – All in One Elementor WooCommerce Builder",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "4.4.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/woolementor/trunk/widgets/tabs-classic/tabs-classic.php
plugins	www.plugins.trac.wordpress.org/browser/woolementor/trunk/widgets/shop-slider/template.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/3115e8ad-8e68-41e9-a3a0-5f003d921037
plugins	www.plugins.trac.wordpress.org/browser/woolementor/trunk/widgets/image-comparison/image-comparison.php
wordpress	www.wordpress.org/plugins/woolementor/
plugins	www.plugins.trac.wordpress.org/changeset/3099922/

08 Apr 2026 16:45Current

CVSS 3.16.4

EPSS0.00402

CWE-79