Skip to content
Marketingfire vulnerabilities
Newest
-
marketingfire discussion board – wordpress forum plugin
Discussion Board <= 2.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User Profile Website (user_url) Field
CVE-2026-107765
6.4 Medium
-
marketing fire widget options
WordPress Widget Options plugin <= 4.2.3 - Remote Code Execution (RCE) vulnerability
CVE-2026-54823
9.9 Critical
-
marketing fire widget options
WordPress Widget Options plugin <= 4.0.1 - Subscriber+ User Meta Data Exposure Vulnerability
CVE-2024-35690
6.5 Medium
-
marketingfire widget options – advanced conditional visibility for gutenberg blocks & classic widgets, marketing fire, llc widget options - extended +1 more
Widget Options <= 4.2.2 - Authenticated (Contributor+) Remote Code Execution via Display Logic
CVE-2026-2052
8.8 High
-
marketingfire discussion board – wordpress forum plugin
Discussion Board – WordPress Forum Plugin <= 2.5.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
CVE-2025-8483
6.3 Medium
-
marketingfire widget options – advanced conditional visibility for gutenberg blocks & classic widgets
Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-10580
6.4 Medium
-
marketingfire widget options – advanced conditional visibility for gutenberg blocks & classic widgets, widget-options +1 more
Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution
CVE-2024-8672
Public exploit
EPSS 45.4%
9.9 Critical
-
marketing fire editorial calendar
WordPress Editorial Calendar Plugin <= 3.7.12 is vulnerable to Insecure Direct Object References (IDOR)
CVE-2023-36520
5.4 Medium