Stellarwp Image Widget vulnerabilities

• stellarwp image widget WordPress Image Widget plugin <= 4.4.11 - Cross Site Scripting (XSS) vulnerability CVE-2026-42643 5.9 MediumApril 29, 2026
• stellarwp image widget Image Widget < 4.4.11 - Admin+ Stored XSS CVE-2024-10939 4.8 MediumDecember 13, 2024