Widget Options – The #1 WordPress Widget & Block Control Plugin, CVE-2025-22630
- CVE, Research URL
- Home page URL
-
Security reports for Widget Options – The #1 WordPress Widget & Block Control Plugin
- Published on
- Feb 14, 2025
- Research Description
- Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in MarketingFire Widget Options allows OS Command Injection.This issue affects Widget Options: from n/a through 4.1.0.
- Affected versions
-
max 4.1.1.
- Status
-
vulnerable