📦 Siteorigin Widgets Bundle

by Siteorigin

🔍 What is Siteorigin Widgets Bundle?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2023-6295

HIGH CVSS 7.2 Dec 18, 2023

This vulnerability allows administrators on WordPress Multisite installations to perform Local File Inclusion (LFI) attacks by exploiting insufficient input validation in the SiteOrigin Widgets Bundle...

CVE-2024-54268

MEDIUM CVSS 4.3 Dec 13, 2024

This CVE describes a missing authorization vulnerability in the SiteOrigin Widgets Bundle WordPress plugin that allows attackers to exploit incorrectly configured access control security levels. Attac...

CVE-2024-5090

MEDIUM CVSS 6.4 Jun 11, 2024

This vulnerability allows authenticated WordPress users with contributor-level access or higher to inject malicious scripts into pages using the SiteOrigin Blog Widget. The scripts execute whenever us...