Known vulnerabilities in the Widgets Bundle plugin
9 security advisories have been published for the Widgets Bundle plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Widgets Bundle - Broken Access Control (CVE-2026-2127) MEDIUM
- Widgets Bundle - Cross-Site Scripting (XSS) (CVE-2025-5585) MEDIUM
- Widgets Bundle - Cross-Site Scripting (XSS) (CVE-2024-5901) MEDIUM
- Widgets Bundle - Cross-Site Scripting (XSS) (CVE-2024-5090) MEDIUM
- Widgets Bundle - Cross-Site Scripting (XSS) (CVE-2024-4362) MEDIUM
- Widgets Bundle - Cross-Site Scripting (XSS) (CVE-2024-1723) MEDIUM
- Widgets Bundle - Cross-Site Scripting (XSS) (CVE-2024-1070) MEDIUM
- Widgets Bundle - Cross-Site Scripting (XSS) (CVE-2024-1058) MEDIUM
- Widgets Bundle - Cross-Site Scripting (XSS) (CVE-2024-0961) MEDIUM