Description
Contributor Remote Code Execution (RCE) in Widget Options <= 4.2.3 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MarketingFire | Widget Options | ≤ 4.2.3 | — |
Critical · 9.9
CVE-2026-54823
EUVD-2026-39365GHSA-28rq-6fmf-79j2
WordPress Widget Options plugin <= 4.2.3 - Remote Code Execution (RCE) vulnerability
Published Jun 25, 2026 · Updated Jun 25, 2026 · Assigned by Patchstack