CVE Intelligence

StellarWP Image Widget vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting StellarWP Image Widget: 1 record(s), with affected versions and fixes.

CVE-2026-42643 Medium · 5.9 CWE-79 Apr 29, 2026
WordPress Image Widget plugin <= 4.4.11 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP Image Widget image-widget allows Stored XSS.This issue affects Image Widget: from n/a through <= 4.4.11.