SiteOrigin Widgets Bundle

Explore SiteOrigin Widgets Bundle vulnerabilities across all versions. Currently tracking 11 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all SiteOrigin Widgets Bundle vulnerabilities before they are exploited.

Vulnerability Records

11 records


2026-02-17 20:23	SiteOrigin Widgets Bundle <= 1.70.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution SiteOrigin Widgets Bundle <= 1.70.4	`CVE-2026-2127`	5.4 Medium	bashu	Yes
2025-06-24 13:56	SiteOrigin Widgets Bundle <= 1.68.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-url` DOM Element Attribute SiteOrigin Widgets Bundle <= 1.68.5	`CVE-2025-5585`	6.4 Medium	Asaf Mozes	Yes
2024-12-10 00:00	SiteOrigin Widgets Bundle <= 1.64.0 - Missing Authorization SiteOrigin Widgets Bundle <= 1.64.0	`CVE-2024-54268`	4.3 Medium	Rafie Muhammad	Yes
2024-07-30 07:35	SiteOrigin Widgets Bundle <= 1.62.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Image Grid widget SiteOrigin Widgets Bundle <= 1.62.2	`CVE-2024-5901`	6.4 Medium	Ngô Thiên An (ancorn_)	Yes
2024-06-10 00:00	SiteOrigin Widgets Bundle <= 1.61.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via SiteOrigin Blog Widget SiteOrigin Widgets Bundle <= 1.61.1	`CVE-2024-5090`	6.4 Medium	Ngô Thiên An (ancorn_)	Yes
2024-05-21 19:57	SiteOrigin Widgets Bundle <= 1.60.0 - - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode SiteOrigin Widgets Bundle <= 1.60.0	`CVE-2024-4362`	6.4 Medium	stealthcopter	Yes
2024-03-04 00:00	SiteOrigin Widgets Bundle <= 1.58.7 - Authenticated (Contributor+) Stored Cross-Site Scripting SiteOrigin Widgets Bundle <= 1.58.7	`CVE-2024-1723`	6.4 Medium	wesley (wcraft)	Yes
2024-02-12 00:00	SiteOrigin Widgets Bundle <= 1.58.2 - Authenticated (Contributor+) Stored Cross-Site Scripting SiteOrigin Widgets Bundle <= 1.58.2	`CVE-2024-1070`	6.4 Medium	Nikolas	Yes
2024-02-12 00:00	SiteOrigin Widgets Bundle <= 1.58.3 - Authenticated (Contributor+) Stored Cross-Site Scripting SiteOrigin Widgets Bundle <= 1.58.3	`CVE-2024-1058`	6.4 Medium	wesley (wcraft)	Yes
2024-01-29 00:00	SiteOrigin Widgets Bundle <= 1.58.1 - Authenticated (Contributor+) Stored Cross-Site Scripting SiteOrigin Widgets Bundle <= 1.58.1	`CVE-2024-0961`	6.4 Medium	Webbernaut	Yes

Showing 1–10 of 11 reports