Known vulnerabilities in the Siteorigin Widgets Bundle plugin
10 security advisories have been published for the Siteorigin Widgets Bundle plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Siteorigin Widgets Bundle - Broken Access Control (CVE-2026-2127) MEDIUM
- Siteorigin Widgets Bundle - Cross-Site Scripting (XSS) (CVE-2025-5585) MEDIUM
- Siteorigin Widgets Bundle - Cross-Site Scripting (XSS) (CVE-2024-5901) MEDIUM
- Siteorigin Widgets Bundle - Cross-Site Scripting (XSS) (CVE-2024-5090) MEDIUM
- Siteorigin Widgets Bundle - Cross-Site Scripting (XSS) (CVE-2024-4362) MEDIUM
- Siteorigin Widgets Bundle - Cross-Site Scripting (XSS) (CVE-2024-1723) MEDIUM
- Siteorigin Widgets Bundle - Cross-Site Scripting (XSS) (CVE-2024-1070) MEDIUM
- Siteorigin Widgets Bundle - Cross-Site Scripting (XSS) (CVE-2024-1058) MEDIUM
- Siteorigin Widgets Bundle - Cross-Site Scripting (XSS) (CVE-2024-0961) MEDIUM
- Siteorigin Widgets Bundle - Improper Input Validation (CVE-2023-6295) HIGH