Approved changes feed: RSS · Atom

cpe:2.3:a:machothemes:cpo_companion:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMachothemes (011507af-8f8b-5838-9d9a-c7be4c5d7373)
ProductCpo Companion (7745047d-0938-52e9-9c87-e539228af569)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wpchill/cpo-companion purl2cpe 2026-06-01 10:13:01.202822

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-33916 vulnerable 2026-06-08 06:37:32.306235 WordPress CPO Companion plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MachoThemes CPO Companion allows Stored XSS.This issue affects CPO Companion: from n/a through 1.1.0.
Published: 2024-05-03T07:18:23.860Z
Updated: 2026-04-28T16:09:46.327Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.