Description
Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Marketing Fire | Widget Options | ≤ 4.2.5 | — |
Critical · 9.1
CVE-2026-116852
EUVD-2026-114309GHSA-pqqr-8pmv-5qrf
WordPress Widget Options plugin <= 4.2.5 - Remote Code Execution (RCE) vulnerability
Published Oct 30, 2026 · Updated Oct 30, 2026 · Assigned by Patchstack