VikWidgetsLoader – Collection of Widgets
VikWidgetsLoader – Collection of Widgets has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for VikWidgetsLoader – Collection of Widgets has a vendor fix available, so running the current release closes it.
All of these findings were reported by Artus KG. VikWidgetsLoader – Collection of Widgets is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2026-84899VikWidgetsLoader – Collection of Widgets < 1.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

VikWidgetsLoader – Collection of Widgets
Author
e4jvikwp
VikWidgetsLoader Add 8 new fancy widgets to your website! Install this plugin to load a variety of widgets ready to be used with your theme. Visit VikWP.com for more details. Here are the included Widgets Category Post – Display your latest posts filtered by category Cookies Policy – Displays a message regarding the cookie policies Google Maps – Displays a Google Map with custom markers Grid Content – Displays a grid of posts Icons – Displays a grid of icons Speakers – Displays a list of people with names and surnames Text Slide – Displays several texts sliding over a still background image Trip Advisor Review – Displays one of several Trip Advisor widgets WordPress’s Powerful Widget System VikWidgetsLoader does not rely on external framworks, as we believe in the power of the lightweight and resourceful WordPress Widget manager. Every widget is loaded as any default WordPress Widget is, so you don’t need to load external libraries or anything. Extendable System VikWidgetsLoader has a simple to use and extendable, which will allow us (and you too!) to develop additional widgets for it with ease! The installation also comes provided with a simple widgets guide, which you can follow to add any custom widget you wish to develop.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C