Marketingfire Widget Options vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Marketingfire Widget Options: 3 record(s), with affected versions and fixes.

CVE-2026-54823 Critical · 9.9 CWE-94 Jun 25, 2026

Widget Options Plugin: Contributor Remote Code Execution (CVE-2026-54823)

Contributor Remote Code Execution (RCE) in Widget Options <= 4.2.3 versions.

CVE-2024-35690 Medium · 6.5 CWE-201 Jun 17, 2026

WordPress Widget Options plugin <= 4.0.1 - Subscriber+ User Meta Data Exposure Vulnerability

Insertion of sensitive information into sent data vulnerability in MarketingFire Widget Options allows Retrieve Embedded Sensitive Data. This issue affects Widget Options: from n/a through 4.0.1.

CVE-2026-27984 Critical · 9.0 CWE-94 Mar 5, 2026

WordPress Widget Options plugin <= 4.1.3 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in Marketing Fire Widget Options widget-options allows Code Injection.This issue affects Widget Options: from n/a through <= 4.1.3.