Advisories · Technology
Marketing Fire, LLC Widget Options - Extended.
Every CVE that names Marketing Fire, LLC Widget Options - Extended among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Widget Options <= 4.2.2 - Authenticated (Contributor+) Remote Code Execution via Display Logic
- marketingfire Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets
- Marketing Fire, LLC Widget Options - Extended
- Code injection
- CVSS 6.4 Medium
Widget Options - Extended <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- Marketing Fire, LLC Widget Options - Extended
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Widget Options - Extended plugin <= 5.1.0 - Multiple Data Exposure Vulnerability
- Marketing Fire, LLC Widget Options - Extended
- Information disclosure