Marketing Fire LLC
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Widget Options - Extended | 3 | – | May 2, 2026 |
| LoginWP - Pro | 2 | – | Jan 5, 2026 |
Exploited and recent CVEs
- CVE-2026-2052 Widget Options <= 4.2.2 - Authenticated (Contributor+) Remote Code Execution via Display Logic 0.8%
- CVE-2025-39561 WordPress LoginWP - Pro Plugin <= 4.0.8.5 - Broken Access Control vulnerability 0.2%
- CVE-2025-46255 WordPress LoginWP - Pro Plugin <= 4.0.8.5 - Settings Change vulnerability 0.2%
- CVE-2025-8902 Widget Options - Extended <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
- CVE-2024-35691 WordPress Widget Options - Extended plugin <= 5.1.0 - Multiple Data Exposure Vulnerability 0.4%