CVE-2024-5179

CVE-2024-5179 concerns Cowidgets – Elementor Addons for WordPress. The vulnerability is Local File Inclusion via the item_style and style parameters, allowing an authenticated attacker with Contributor-level access and above to include and execute PHP files on the server, potentially bypassing co...

CVE-2024-4697

CVE-2024-4697 is a WordPress plugin issue in Cowidgets – Elementor Addons. The vulnerability is a Stored Cross‑Site Scripting via the heading_tag parameter in all versions up to 1.1.1, caused by insufficient input sanitization and output escaping. It enables authenticated attackers with contribut...