Skip to content
OpenAdvisories
Critical · 10.0 CVE-2025-30580 EUVD-2025-9487GHSA-43x9-pvmm-pvx5

WordPress DigiWidgets Image Editor plugin <= 1.10 - Remote Code Execution (RCE) Vulnerability

Published Apr 1, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in kellydiek DigiWidgets Image Editor digiwidgets-image-editor allows Remote Code Inclusion.This issue affects DigiWidgets Image Editor: from n/a through <= 1.10.

Affected products

VendorProductAffectedFixed
kellydiek DigiWidgets Image Editor ≤ 1.10 —

References