Meks ThemeForest Smart Widget

Meks ThemeForest Smart Widget has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 2 are fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.4 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

Every one of the 2 issues recorded for Meks ThemeForest Smart Widget has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Meks ThemeForest Smart Widget is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.6.7.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Meks ThemeForest Smart Widget vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.4CVE-2024-33694

Meks ThemeForest Smart Widget <= 1.5 - Authenticated (Admin+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2024-04-26 00:00	Meks ThemeForest Smart Widget <= 1.5 - Authenticated (Admin+) Stored Cross-Site Scripting Meks ThemeForest Smart Widget <= 1.5	`CVE-2024-33694`	4.4 Medium	Joshua Chan	Yes
2023-07-26 00:00	Meks Smart Social Widget <= 1.6 - Cross-Site Request Forgery via meks_remove_notification Meks ThemeForest Smart Widget <= 1.4	`CVE-2023-25989`	4.3 Medium	Muhammad Daffa	Yes

Showing 1–2 of 2 reports

Latestv1.6

Meks ThemeForest Smart Widget

Author

Meks

5.0(1)

100/100

Last Updated

2024-07-23 (2y ago)

Active Installs

10,000+

Downloads

309,113

Requires WP

3.0+

Requires PHP

Tested up to

WP 6.6.7

Created

2013-10-02 (13y ago)

A simple and powerful WordPress plugin with which you can display ThemeForest items as a WordPress widget. Several smart options are provided for selecting and ordering. You can select ThemeForest latest items, popular items or items from one or more specific users. Optionally, you can connect items with your affiliate links as well. If you are a ThemeForest author this widget is perfect for you. Features Using Envato official API Supports all ThemeForest marketplace categories Select latest ThemeForest items Select popular ThemeForest items Select items from one or more specific users Order items by release date, upload date, numbers of sales, price or random Add your affiliate links to ThemeForest items Caching system integrated for better performance ThemeForest Smart Widget plugin is created by Meks Live example? You can see ThemeForest Smart Widget live example on our Voice theme demo website Available languages English (en_US) – default Spanish (es_ES) – translation by Maria Ramos WebHostingHub Serbian (sr_RS) – translation by Ogi Djuraskovic firstsiteguide.com

View on WordPress.org