Siteorigin Widgets Bundle vulnerabilities

• gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.68.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-url` DOM Element Attribute CVE-2025-5585 6.4 MediumJune 25, 2025
• gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more WordPress SiteOrigin Widgets Bundle plugin <= 1.64.0 - Broken Access Control vulnerability CVE-2024-54268 4.3 MediumDecember 13, 2024
• gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.62.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Image Grid widget CVE-2024-5901 6.4 MediumJuly 30, 2024
• devnath verma widget bundle, siteorigin widgets bundle +1 more Widget Bundle <= 2.0.0 - Widget Disable/Enable via CSRF CVE-2024-4969 4.3 MediumJune 21, 2024
• gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.61.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via SiteOrigin Blog Widget CVE-2024-5090 6.4 MediumJune 11, 2024
• gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.60.0 - - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode CVE-2024-4362 6.4 MediumMay 22, 2024
• gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.58.7 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1723 6.4 MediumMarch 13, 2024
• gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.58.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1058 6.4 MediumFebruary 20, 2024
• gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.58.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1070 6.4 MediumFebruary 20, 2024
• gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more SiteOrigin Widgets Bundle <= 1.58.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-0961 6.4 MediumFebruary 5, 2024
• gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 more so-widgets-bundle < 1.51.0 - Admin+ Local File Inclusion CVE-2023-6295 7.2 HighDecember 18, 2023