Marketing Fire LLC

Products

ProductCVEsExploitedLatest
Widget Options - Extended3–May 2, 2026
LoginWP - Pro2–Jan 5, 2026

Exploited and recent CVEs

  • CVE-2026-2052 High 8.8 Widget Options <= 4.2.2 - Authenticated (Contributor+) Remote Code Execution via Display Logic 0.8%
  • CVE-2025-39561 Medium 6.5 WordPress LoginWP - Pro Plugin <= 4.0.8.5 - Broken Access Control vulnerability 0.2%
  • CVE-2025-46255 High 7.5 WordPress LoginWP - Pro Plugin <= 4.0.8.5 - Settings Change vulnerability 0.2%
  • CVE-2025-8902 Medium 6.4 Widget Options - Extended <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2024-35691 Medium 6.5 WordPress Widget Options - Extended plugin <= 5.1.0 - Multiple Data Exposure Vulnerability 0.4%