Advisories · Technology
marketingfire Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets.
Every CVE that names marketingfire Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Widget Options <= 4.2.6.1 - Authenticated (Contributor+) Code Injection via 'post_content' Parameter
- marketingfire Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets
- Code injection
- CVSS 8.8 High
Widget Options <= 4.2.2 - Authenticated (Contributor+) Remote Code Execution via Display Logic
- marketingfire Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets
- Marketing Fire, LLC Widget Options - Extended
- Code injection
- CVSS 6.4 Medium
Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
- marketingfire Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets
- Cross-site scripting (XSS)
- CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution
- marketingfire Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets
- Code injection