marketingfire vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20241
3. 20252
4. 20264

Newest CVEs

• CVE-2026-107765

  Discussion Board <= 2.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User Profile Website (user_url) Field

  marketingfire · Discussion Board – WordPress Forum Plugin

  Medium6.4
• CVE-2026-54823

  WordPress Widget Options plugin <= 4.2.3 - Remote Code Execution (RCE) vulnerability

  MarketingFire · Widget Options

  Critical9.9
• CVE-2024-35690

  WordPress Widget Options plugin <= 4.0.1 - Subscriber+ User Meta Data Exposure Vulnerability

  MarketingFire · Widget Options

  Medium6.5
• CVE-2026-2052

  Widget Options <= 4.2.2 - Authenticated (Contributor+) Remote Code Execution via Display Logic

  marketingfire · Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets

  High8.8
• CVE-2025-8483

  Discussion Board – WordPress Forum Plugin <= 2.5.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution

  marketingfire · Discussion Board – WordPress Forum Plugin

  Medium6.3
• CVE-2025-10580

  Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

  marketingfire · Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets

  Medium6.4
• CVE-2024-8672

  Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution

  marketingfire · Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets

  Critical9.9
• CVE-2023-36520

  WordPress Editorial Calendar Plugin <= 3.7.12 is vulnerable to Insecure Direct Object References (IDOR)

  MarketingFire · Editorial Calendar

  Medium5.4