MarketingFire
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets | 3 | – | May 2, 2026 |
| Discussion Board – WordPress Forum Plugin | 2 | – | Oct 31, 2026 |
| Widget Options | 2 | – | Jun 25, 2026 |
| Editorial Calendar | 1 | – | Dec 20, 2023 |
Exploited and recent CVEs
- CVE-2026-107765 Discussion Board <= 2.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User Profile Website (user_url) Field 0.2%
- CVE-2026-54823 WordPress Widget Options plugin <= 4.2.3 - Remote Code Execution (RCE) vulnerability 0.8%
- CVE-2024-35690 WordPress Widget Options plugin <= 4.0.1 - Subscriber+ User Meta Data Exposure Vulnerability 0.3%
- CVE-2026-2052 Widget Options <= 4.2.2 - Authenticated (Contributor+) Remote Code Execution via Display Logic 0.8%
- CVE-2025-8483 Discussion Board – WordPress Forum Plugin <= 2.5.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution 0.3%
- CVE-2025-10580 Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
- CVE-2024-8672 Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution 45.4%
- CVE-2023-36520 WordPress Editorial Calendar Plugin <= 3.7.12 is vulnerable to Insecure Direct Object References (IDOR) 0.4%