Skip to contentGpriday Siteorigin Widgets Bundle vulnerabilities
- gpriday siteorigin widgets bundleSiteOrigin Widgets Bundle <= 1.74.3 - Authenticated (Contributor+) Arbitrary File Read via LESS Injection via [siteorigin_widget] Shortcode 'value' JSON Instance (design.colors LESS Variable)CVE-2026-973486.5 Medium
- gpriday siteorigin widgets bundleSiteOrigin Widgets Bundle <= 1.73.2 - Authenticated (Contributor+) Local File Inclusion via 'theme' ParameterCVE-2026-921747.5 High
- gpriday siteorigin widgets bundleSiteOrigin Widgets Bundle <= 1.70.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode ExecutionCVE-2026-21275.4 Medium
- gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 moreSiteOrigin Widgets Bundle <= 1.68.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-url` DOM Element AttributeCVE-2025-55856.4 Medium
- gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 moreWordPress SiteOrigin Widgets Bundle plugin <= 1.64.0 - Broken Access Control vulnerabilityCVE-2024-542684.3 Medium
- gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 moreSiteOrigin Widgets Bundle <= 1.62.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Image Grid widgetCVE-2024-59016.4 Medium
- gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 moreSiteOrigin Widgets Bundle <= 1.61.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via SiteOrigin Blog WidgetCVE-2024-50906.4 Medium
- gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 moreSiteOrigin Widgets Bundle <= 1.60.0 - - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' ShortcodeCVE-2024-43626.4 Medium
- gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 moreSiteOrigin Widgets Bundle <= 1.58.7 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-17236.4 Medium
- gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 moreSiteOrigin Widgets Bundle <= 1.58.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-10586.4 Medium
- gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 moreSiteOrigin Widgets Bundle <= 1.58.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-10706.4 Medium
- gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 moreSiteOrigin Widgets Bundle <= 1.58.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-09616.4 Medium
- gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 moreso-widgets-bundle < 1.51.0 - Admin+ Local File InclusionCVE-2023-62957.2 High