Codeworkweb Cww Companion vulnerabilities

• codeworkweb cww companion WordPress CWW Companion plugin <= 1.3.2 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-67473 4.3 MediumDecember 9, 2025
• codeworkweb cww companion CWW Companion <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-2130 6.4 MediumMarch 12, 2024