Skip to content
OpenAdvisories
High · 7.1 CVE-2025-68842 EUVD-2025-207585GHSA-2v7m-mcj3-m7h7

WordPress Widget Logic Visual plugin <= 1.52 - Reflected Cross Site Scripting (XSS) vulnerability

Published Feb 20, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: totalbounty Product: Widget Logic Visual

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in totalbounty Widget Logic Visual widget-logic-visual allows Reflected XSS.This issue affects Widget Logic Visual: from n/a through <= 1.52.

Affected products

VendorProductAffectedFixed
totalbounty Widget Logic Visual ≤ 1.52 —

References