Extension WordPress
Vulnérabilités Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets
Cette page rassemble les failles publiées pour Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets
9 fiches
Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets <= 4.2.3 – Authenticated (Contributor+) Remote Code Execution
The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.3. This makes it possible for authenticated attackers, with…
*-4.2.3
4.2.4
17/06/2026
Widget Options <= 4.2.2 – Authenticated (Contributor+) Remote Code Execution via Display Logic
The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.2 via the Display Logic feature. This is due…
*-4.2.2
4.2.3
01/05/2026
Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets <= 4.1.3 – Authenticated (Contributor+) Remote Code Execution
The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.1.3. This makes it possible for authenticated attackers, with…
*-4.1.3
4.2.0
02/03/2026
Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.1.2 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Widget Options – The #1 WordPress Widget & Block Control Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple functions in all versions up to, and including, 4.1.2 due to insufficient input sanitization and…
*-4.1.2
4.1.3
24/10/2025
Widget Options <= 4.1.0 – Authenticated (Contributor+) Remote Code Execution
The Widget Options – The #1 WordPress Widget & Block Control Plugin plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.1.0. This makes it possible for authenticated attackers, with Contributor-level…
*-4.1.0
4.1.1
11/02/2025
Widget Options <= 4.0.8 – Missing Authorization to Notice Dismissal
The Widget Options plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the widgetopts_ajax_hide_rating() function in versions up to, and including, 4.0.8. This makes it possible for authenticated attackers, with…
*-4.0.8
4.0.9
15/01/2025
Widget Options <= 4.0.6.1 – Missing Authorization
The Widget Options plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the widgetopts_save_widget_editor_cache() function in versions up to, and including, 4.0.6.1. This makes it possible for authenticated attackers, with contributor-level access…
*-4.0.6.1
4.0.8
19/12/2024
Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 – Authenticated (Contributor+) Remote Code Execution
The Widget Options – The #1 WordPress Widget & Block Control Plugin plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.0.7 via the display logic functionality that extends several page…
*-4.0.7
4.0.8
27/11/2024
Widget Options – Extended <= 5.1.0 & Widget Options <= 4.0.1 – Authenticated (Subscriber+) Information Disclosure
The Widget Options – Extended plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to 5.1.3 (exclusive) for Widget Options – Extended and all versions up to, and including, 4.0.1 for Widget Options. This…
*-4.0.1
4.0.2
06/06/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.