totalbounty

Products

ProductCVEsExploitedLatest
Widget Logic Visual2–Jul 8, 2026

Exploited and recent CVEs

  • CVE-2026-14158 High 8.8 Widget Logic Visual <= 1.52 - Authenticated (Subscriber+) Remote Code Execution via 'nwlv[cod-tag]' Parameter 1.0%
  • CVE-2025-68842 High 7.1 WordPress Widget Logic Visual plugin <= 1.52 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%