agentprime: gpriday-siteorigin-widgets-bundleEvery new CVE for gpriday-siteorigin-widgets-bundle.https://agentprime.io/CVE-2026-97348: SiteOrigin Widgets Bundle <= 1.74.3 - Authenticated (Contributor+) Arbitrary File Read via LESS Injection via [siteorigin_widget] Shortcode 'value' JSON Instance (design.colors LESS Variable)https://agentprime.io/advisories/CVE-2026-97348/https://agentprime.io/advisories/CVE-2026-97348/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 06:40:10 GMTCVECVE-2026-92174: SiteOrigin Widgets Bundle <= 1.73.2 - Authenticated (Contributor+) Local File Inclusion via 'theme' Parameterhttps://agentprime.io/advisories/CVE-2026-92174/https://agentprime.io/advisories/CVE-2026-92174/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 05:30:17 GMTCVECVE-2026-2127: SiteOrigin Widgets Bundle <= 1.70.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Executionhttps://agentprime.io/advisories/CVE-2026-2127/https://agentprime.io/advisories/CVE-2026-2127/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Feb 2026 08:26:04 GMTCVECVE-2025-5585: SiteOrigin Widgets Bundle <= 1.68.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-url` DOM Element Attributehttps://agentprime.io/advisories/CVE-2025-5585/https://agentprime.io/advisories/CVE-2025-5585/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Jun 2025 02:22:07 GMTCVECVE-2024-5901: SiteOrigin Widgets Bundle <= 1.62.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Image Grid widgethttps://agentprime.io/advisories/CVE-2024-5901/https://agentprime.io/advisories/CVE-2024-5901/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jul 2024 20:30:04 GMTCVECVE-2024-5090: SiteOrigin Widgets Bundle <= 1.61.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via SiteOrigin Blog Widgethttps://agentprime.io/advisories/CVE-2024-5090/https://agentprime.io/advisories/CVE-2024-5090/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Jun 2024 02:01:54 GMTCVECVE-2024-4362: SiteOrigin Widgets Bundle <= 1.60.0 - - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcodehttps://agentprime.io/advisories/CVE-2024-4362/https://agentprime.io/advisories/CVE-2024-4362/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 May 2024 08:31:22 GMTCVECVE-2024-1723: SiteOrigin Widgets Bundle <= 1.58.7 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-1723/https://agentprime.io/advisories/CVE-2024-1723/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Mar 2024 15:27:21 GMTCVECVE-2024-1058: SiteOrigin Widgets Bundle <= 1.58.3 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-1058/https://agentprime.io/advisories/CVE-2024-1058/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Feb 2024 18:56:52 GMTCVECVE-2024-1070: SiteOrigin Widgets Bundle <= 1.58.2 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-1070/https://agentprime.io/advisories/CVE-2024-1070/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Feb 2024 18:56:38 GMTCVECVE-2024-0961: SiteOrigin Widgets Bundle <= 1.58.1 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-0961/https://agentprime.io/advisories/CVE-2024-0961/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Feb 2024 21:21:48 GMTCVE