141 matches found
CVE-2026-116615
The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 4.2.6.1 via the postcontent parameter. This is due to asymmetric parsing between the save-time strip filter...
CVE-2026-116615
The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress (versions up to and including 4.2.6.1 ) is vulnerable to Code Injection via the post_content parameter. The root cause is asymmetric parsing: an attacker can embed a
EUVD-2026-124976
The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 4.2.6.1 via the postcontent parameter. This is due to asymmetric parsing between the save-time strip filter...
CVE-2026-116615 Widget Options <= 4.2.6.1 - Authenticated (Contributor+) Code Injection via 'post_content' Parameter
The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 4.2.6.1 via the postcontent parameter. This is due to asymmetric parsing between the save-time strip filter...
WordPress Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin <= 4.2.6.1 - Authenticated (Contributor+) Code Injection vulnerability
Authenticated Contributor+ Code Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin Widget Options versions = 4.2.6.1...
CVE-2026-116852
Author Remote Code Execution RCE in Widget Options = 4.2.5 versions...
CVE-2026-116852 WordPress Widget Options plugin <= 4.2.5 - Remote Code Execution (RCE) vulnerability
Author Remote Code Execution RCE in Widget Options = 4.2.5 versions...
CVE-2026-116852
The WordPress Widget Options plugin (versions ≤ 4.2.5 ) is vulnerable to Remote Code Execution (RCE) . The vulnerability is associated with CWE-94 (Improper Control of Generation of Code). While the provided documents confirm the existence of the RCE and its CRITICAL severity, specific technical ...
EUVD-2026-114309
Author Remote Code Execution RCE in Widget Options = 4.2.5 versions...
WordPress Widget Options plugin <= 4.2.5 - Remote Code Execution (RCE) vulnerability
Remote Code Execution RCE vulnerability discovered by sanghyeok Kim Hamoyeah in WordPress Plugin Widget Options versions = 4.2.5...
CVE-2026-116852: Marketing Fire Widget Options: Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions.
Author Remote Code Execution RCE in Widget Options = 4.2.5 versions...
PT-2026-133759
Name of the Vulnerable Software and Affected Versions Widget Options versions 4.2.5 and earlier Description An attacker with access to the plugin can execute arbitrary code on the web server hosting the site through the widget settings. Recommendations At the moment, there is no information about...
CVE-2026-54823
Contributor Remote Code Execution RCE in Widget Options = 4.2.3 versions...
CVE-2026-54823
Contributor Remote Code Execution RCE in Widget Options = 4.2.3 versions...
CVE-2026-54823 WordPress Widget Options plugin <= 4.2.3 - Remote Code Execution (RCE) vulnerability
Contributor Remote Code Execution RCE in Widget Options = 4.2.3 versions...
CVE-2026-54823 WordPress Widget Options plugin <= 4.2.3 - Remote Code Execution (RCE) vulnerability
Contributor Remote Code Execution RCE in Widget Options = 4.2.3 versions...
CVE-2026-54823
CVE-2026-54823 affects the WordPress Widget Options plugin, specifically versions
EUVD-2026-39365
Contributor Remote Code Execution RCE in Widget Options = 4.2.3 versions...