Known vulnerabilities in siteorigin_widgets_bundle
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2024-4969 | The Widget Bundle WordPress plugin through 2.0.0 does not have CSRF checks when logging Widgets, which could allow… | 4.3 Medium | Jun 21, 2024 |
| CVE-2024-5090 | The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… | 6.4 Medium | Jun 11, 2024 |