All 6 CVE vulnerabilities found in Widget Options, with AI-generated Chinese analysis, references, and POCs.
Vendor: Marketing Fire
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-54823 | WordPress Widget Options plugin <= 4.2.3 - Remote Code Execution (RCE) vulnerability CWE-94 | 9.9 | Critical | 2026-06-25 |
| CVE-2024-35690 | WordPress Widget Options plugin <= 4.0.1 - Subscriber+ User Meta Data Exposure Vulnerability CWE-201 | 6.5 | Medium | 2026-06-17 |
| CVE-2026-27984 | WordPress Widget Options plugin <= 4.1.3 - Remote Code Execution (RCE) vulnerability CWE-94 | 9.0 | Critical | 2026-03-05 |
| CVE-2025-22630 | WordPress Widget Options Plugin <= 4.1.0 - Arbitrary Code Execution vulnerability CWE-77 | 9.9 | Critical | 2025-02-14 |
| CVE-2025-22722 | WordPress Widget Options plugin <= 4.0.8 - Broken Access Control to Notice Dimissal vulnerability CWE-862 | 4.3 | Medium | 2025-01-21 |
| CVE-2024-56219 | WordPress Widget Options plugin <= 4.0.6.1 - Broken Access Control vulnerability CWE-862 | 4.3 | Medium | 2024-12-31 |
All 6 known CVE vulnerabilities affecting Widget Options with full Chinese analysis, references, and POCs where available.