WordPress Widget Bundle Vulnerabilities

Wordpress Widget Bundle vulnerabilities.

30 July 2024

SiteOrigin Widgets Bundle <= 1.62.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Image Grid widget
CVE-2024-5901
WordpressSiteorigin Widgets Bundle6.4MEDIUM

21 June 2024

Unfiltered HTML Settings Vulnerability in Widget Bundle WordPress Plugin
CVE-2024-4970
WordpressWidget Bundle👾🟡4.8MEDIUM
CSRF Vulnerability in Widget Bundle WordPress Plugin
CVE-2024-4969
WordpressWidget Bundle👾🟡4.3MEDIUM
Cross-Site Scripting Vulnerability in Widget Bundle WordPress Plugin
CVE-2024-4616
WordpressWidget Bundle👾🟡6.1MEDIUM

11 June 2024

Stored Cross-Site Scripting Vulnerability in SiteOrigin Widgets Bundle Plugin
CVE-2024-5090
WordpressSiteorigin Widgets Bundle6.4MEDIUM

22 May 2024

Stored Cross-Site Scripting Vulnerability in SiteOrigin Widgets Bundle Plugin
CVE-2024-4362
WordpressSiteorigin Widgets Bundle6.4MEDIUM

13 March 2024

Stored Cross-Site Scripting Vulnerability Affects SiteOrigin Widgets Bundle Plugin
CVE-2024-1723
WordpressSiteorigin Widgets Bundle6.4MEDIUM

29 February 2024

5 February 2024

Stored Cross-Site Scripting Vulnerability in SiteOrigin Widgets Bundle Plugin
CVE-2024-0961
WordpressSiteOrigin Widgets Bundle5.4MEDIUM

18 December 2023

so-widgets-bundle < 1.51.0 - Admin+ Local File Inclusion
CVE-2023-6295
WordpressSiteOrigin Widgets Bundle7.2HIGH

No more vulnerabilities to load.