WordPress Siteorigin Widgets Bundle Vulnerabilities

Wordpress Siteorigin Widgets Bundle vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

18 February 2026

Unauthorized Shortcode Execution in SiteOrigin Widgets Bundle Plugin for WordPress
CVE-2026-2127
WordPressSiteorigin Widgets Bundle5.4MEDIUM

25 June 2025

Stored Cross-Site Scripting in SiteOrigin Widgets Bundle for WordPress
CVE-2025-5585
WordPressSiteorigin Widgets Bundle6.4MEDIUM

13 December 2024

WordPress SiteOrigin Widgets Bundle plugin <= 1.64.0 - Broken Access Control vulnerability
CVE-2024-54268
WordPressSiteorigin Widgets Bundle8.8HIGH

30 July 2024

SiteOrigin Widgets Bundle <= 1.62.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Image Grid widget
CVE-2024-5901
WordPressSiteorigin Widgets Bundle6.4MEDIUM

11 June 2024

Stored Cross-Site Scripting Vulnerability in SiteOrigin Widgets Bundle Plugin
CVE-2024-5090
WordPressSiteorigin Widgets Bundle6.4MEDIUM

22 May 2024

Stored Cross-Site Scripting Vulnerability in SiteOrigin Widgets Bundle Plugin
CVE-2024-4362
WordPressSiteorigin Widgets Bundle6.4MEDIUM

13 March 2024

Stored Cross-Site Scripting Vulnerability Affects SiteOrigin Widgets Bundle Plugin
CVE-2024-1723
WordPressSiteorigin Widgets Bundle6.4MEDIUM

29 February 2024

5 February 2024

Stored Cross-Site Scripting Vulnerability in SiteOrigin Widgets Bundle Plugin
CVE-2024-0961
WordPressSiteorigin Widgets Bundle6.4MEDIUM

18 December 2023

so-widgets-bundle < 1.51.0 - Admin+ Local File Inclusion
CVE-2023-6295
WordpressSiteOrigin Widgets Bundle7.2HIGH