CWW Portfolio

CWW Portfolio has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of October 2026. Their average CVSS score is 9.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high.

The most common weakness is Improper Control Of Filename For Include/Require Statement In PHP Program, behind 1 of the records (100%).

The one issue recorded for CWW Portfolio has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Dimas Maulana. CWW Portfolio is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSCritical

9.8/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all CWW Portfolio vulnerabilities before they are exploited.

Most severe open issueCVSS 9.8CVE-2025-39359

CWW Portfolio <= 1.3.1 - Unauthenticated Local File Inclusion

Read the full analysis

Vulnerability Records

1 records


2025-04-21 00:00	CWW Portfolio <= 1.3.1 - Unauthenticated Local File Inclusion CWW Portfolio <= 1.3.1	`CVE-2025-39359`	9.8 Critical	Dimas Maulana	No

Showing 1–1 of 1 reports

Latestv1.3.4

CWW Portfolio

Author

Code Work Web

5.0(5)

100/100

Last Updated

2025-11-07 (1y ago)

Active Installs

300+

Downloads

94,443

Requires WP

Requires PHP

7.4+

Created

2021-06-12 (6y ago)

This is useful theme for personal portfolio sites to pubish your personal websites in an style with easy configuration options. Get free support at https://codeworkweb.com/contact/ and Check demo at https://demo.codeworkweb.com/cww-portfolio/