totalbounty Widget Logic Visual

• CVE-2026-14158 High 8.8 Widget Logic Visual <= 1.52 - Authenticated (Subscriber+) Remote Code Execution via 'nwlv[cod-tag]' Parameter 1.0%
• CVE-2025-68842 High 7.1 WordPress Widget Logic Visual plugin <= 1.52 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%