| CVE-2026-97348 |
The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and…
|
6.5
Medium
|
Oct 10, 2026 |
| CVE-2026-92174 |
The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and…
|
7.5
High
|
Oct 2, 2026 |
| CVE-2026-2127 |
The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to unauthorized arbitrary shortcode execution in all…
|
5.4
Medium
|
Feb 18, 2026 |
| CVE-2025-5585 |
The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `data-url` DOM…
|
6.4
Medium
|
Jun 25, 2025 |
| CVE-2024-5901 |
The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Grid…
|
6.4
Medium
|
Jul 30, 2024 |
| CVE-2024-5090 |
The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
|
6.4
Medium
|
Jun 11, 2024 |
| CVE-2024-4362 |
The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
|
6.4
Medium
|
May 22, 2024 |
| CVE-2024-1723 |
The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters…
|
6.4
Medium
|
Mar 13, 2024 |
| CVE-2024-1058 |
The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the onclick…
|
6.4
Medium
|
Feb 20, 2024 |
| CVE-2024-1070 |
The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the features…
|
6.4
Medium
|
Feb 20, 2024 |
| CVE-2024-0961 |
The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the code editor in…
|
6.4
Medium
|
Feb 5, 2024 |