Approved changes feed: RSS · Atom

cpe:2.3:a:marketing_fire:widget_options:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMarketing Fire (58b42ee8-fe93-5af6-9479-06d4c7a21a00)
ProductWidget Options (b123c4fa-c51c-5322-af7a-ff23980c6dda)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-27984 vulnerable 2026-06-08 07:55:14.771929 WordPress Widget Options plugin <= 4.1.3 - Remote Code Execution (RCE) vulnerability
CRITICAL (9)
Improper Control of Generation of Code ('Code Injection') vulnerability in Marketing Fire Widget Options widget-options allows Code Injection.This issue affects Widget Options: from n/a through <= 4.1.3.
Published: 2026-03-05T05:54:03.700Z
Updated: 2026-04-28T16:44:29.910Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22722 vulnerable 2026-06-08 07:10:54.676240 WordPress Widget Options plugin <= 4.0.8 - Broken Access Control to Notice Dimissal vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in Marketing Fire Widget Options widget-options allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Widget Options: from n/a through <= 4.0.8.
Published: 2025-01-21T17:21:51.675Z
Updated: 2026-04-28T16:11:05.846Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22630 vulnerable 2026-06-08 07:10:54.542192 WordPress Widget Options Plugin <= 4.1.0 - Arbitrary Code Execution vulnerability
CRITICAL (9.9)
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Marketing Fire Widget Options widget-options allows OS Command Injection.This issue affects Widget Options: from n/a through <= 4.1.0.
Published: 2025-02-14T07:10:21.622Z
Updated: 2026-04-28T16:11:02.370Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56219 vulnerable 2026-06-08 06:54:17.561427 WordPress Widget Options plugin <= 4.0.6.1 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in Marketing Fire Widget Options widget-options allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Widget Options: from n/a through <= 4.0.6.1.
Published: 2024-12-31T10:22:42.089Z
Updated: 2026-04-28T16:10:55.222Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.