Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2026/05/04 8:21 p.m.0 views

CVE-2026-2052

The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.2 via the Display Logic feature. This is due to the plugin using eval on user-supplied Display Logic...

8.8CVSS6.1AI score0.00074EPSS
Exploits0References1
NVD
NVD
added 2026/05/02 8:16 a.m.1 views

CVE-2026-2052

The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.2 via the Display Logic feature. This is due to the plugin using eval on user-supplied Display Logic...

8.8CVSS0.00074EPSS
Exploits0References6
EUVD
EUVD
added 2026/05/02 7:46 a.m.1 views

EUVD-2026-26754

The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.2 via the Display Logic feature. This is due to the plugin using eval on user-supplied Display Logic...

8.8CVSS6.1AI score0.00074EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/05/02 7:46 a.m.1 views

CVE-2026-2052

The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.2 via the Display Logic feature. This is due to the plugin using eval on user-supplied Display Logic...

8.8CVSS6.1AI score0.00074EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2026/05/02 7:46 a.m.2 views

CVE-2026-2052 Widget Options <= 4.2.2 - Authenticated (Contributor+) Remote Code Execution via Display Logic

The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.2 via the Display Logic feature. This is due to the plugin using eval on user-supplied Display Logic...

8.8CVSS6.1AI score0.00074EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/05/02 7:46 a.m.27 views

CVE-2026-2052 Widget Options <= 4.2.2 - Authenticated (Contributor+) Remote Code Execution via Display Logic

The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.2 via the Display Logic feature. This is due to the plugin using eval on user-supplied Display Logic...

8.8CVSS0.00074EPSS
Exploits0References6
CVE
CVE
added 2026/05/02 7:46 a.m.10 views

CVE-2026-2052

The CVE-2026-2052 entry describes a Remote Code Execution vulnerability in the WordPress plugin Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets. Affected: all versions up to and including 4.2.2. Root cause: the plugin uses eval() on user-supplied Display Lo...

8.8CVSS6.1AI score0.00074EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/05/02 12:0 a.m.3 views

PT-2026-36588

Name of the Vulnerable Software and Affected Versions Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets versions prior to 4.2.3 Description Remote Code Execution is possible via the Display Logic feature. The issue arises because the plugin uses the eval...

8.8CVSS6.3AI score0.00074EPSS
Exploits0References12
RedhatCVE
RedhatCVE
added 2026/01/09 10:58 a.m.2 views

CVE-2025-67825

An issue was discovered in Nitro PDF Pro for Windows before 14.42.0.34. In certain cases, it displays signer information from a non-verified PDF field rather than from the verified certificate subject. This could allow a document to present inconsistent signer details. The display logic was updat...

5.5CVSS6.6AI score0.00001EPSS
Exploits0References1
OSV
OSV
added 2026/01/08 6:15 p.m.1 views

CVE-2025-67825

An issue was discovered in Nitro PDF Pro for Windows before 14.42.0.34. In certain cases, it displays signer information from a non-verified PDF field rather than from the verified certificate subject. This could allow a document to present inconsistent signer details. The display logic was updat...

5.5CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2026/01/08 6:15 p.m.2 views

CVE-2025-67825

An issue was discovered in Nitro PDF Pro for Windows before 14.42.0.34. In certain cases, it displays signer information from a non-verified PDF field rather than from the verified certificate subject. This could allow a document to present inconsistent signer details. The display logic was updat...

5.5CVSS0.00001EPSS
Exploits0References2
CVE
CVE
added 2026/01/08 12:0 a.m.15 views

CVE-2025-67825

CVE-2025-67825 affects Nitro PDF Pro for Windows prior to 14.42.0.34. The issue arises when signer information is taken from a non-verified PDF field instead of the verified certificate subject, allowing a document to display inconsistent signer details. The root cause is tied to the display logi...

5.5CVSS6.2AI score0.00001EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2024/11/28 9:47 a.m.97 views

CVE-2024-8672

CVE-2024-8672 affects the WordPress plugin “Widget Options – The #1 WordPress Widget & Block Control Plugin” (versions

9.9CVSS9.6AI score0.78248EPSS
Exploits1References5
Rows per page
Query Builder