Marketing Fire

Products

ProductCVEsExploitedLatest
Widget Options5–Oct 30, 2026
Editorial Calendar2–Mar 13, 2026
Discussion Board1–Dec 30, 2025

Exploited and recent CVEs

  • CVE-2026-116852 Critical 9.1 WordPress Widget Options plugin <= 4.2.5 - Remote Code Execution (RCE) vulnerability 0.6%
  • CVE-2026-32361 Medium 6.5 WordPress Editorial Calendar plugin <= 3.9.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-27984 Critical 9.0 WordPress Widget Options plugin <= 4.1.3 - Remote Code Execution (RCE) vulnerability 0.3%
  • CVE-2025-69023 Medium 4.3 WordPress Discussion Board plugin <= 2.5.7 - Broken Access Control vulnerability 0.2%
  • CVE-2025-68603 Medium 5.4 WordPress Editorial Calendar plugin <= 3.8.8 - Broken Access Control vulnerability 0.2%
  • CVE-2025-22630 Critical 9.9 WordPress Widget Options Plugin <= 4.1.0 - Arbitrary Code Execution vulnerability 1.1%
  • CVE-2025-22722 Medium 4.3 WordPress Widget Options plugin <= 4.0.8 - Broken Access Control to Notice Dimissal vulnerability 0.2%
  • CVE-2024-56219 Medium 4.3 WordPress Widget Options plugin <= 4.0.6.1 - Broken Access Control vulnerability 0.4%