w
widget options
Security Risk Profile
75
/100
highSecurity Risk Score
Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 28, 2024 to present
4
Total CVEs
2
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
7.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
75/100
high
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
1High
1Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Code Injection
2
2
XSS
2
Most Affected Products
1. Widget Options Widget Options2
2. Widget Options Extended plugin for WordPress1
3. Widget Options WordPress Widget & Block Control Plugin1
Recent Vulnerabilities
See more →CVE-2026-116615
CVSS 8.8high
Widget Options <= 4.2.6.1 - Authenticated (Contributor+) Code Injection via 'post_content' Parameter
Nov 13, 2026🔧 No Patch
CVE-2025-10580
CVSS 6.4medium
Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Oct 25, 2025🔧 No Patch
CVE-2025-8902
CVSS 6.4EPSS 0%medium
Widget Options - Extended <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Sep 23, 2025🔧 No Patch
CVE-2024-8672
CVSS 9.9critical
Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution
Nov 28, 2024🔧 No Patch
Monitor widget options in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.