Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

marketingfire vulnerabilities

9 published CVEs name marketingfire among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-116615

    Widget Options <= 4.2.6.1 - Authenticated (Contributor+) Code Injection via 'post_content' Parameter

    marketingfire · Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets

    High8.8
  • CVE-2026-107765

    Discussion Board <= 2.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User Profile Website (user_url) Field

    marketingfire · Discussion Board – WordPress Forum Plugin

    Medium6.4
  • CVE-2026-54823

    WordPress Widget Options plugin <= 4.2.3 - Remote Code Execution (RCE) vulnerability

    MarketingFire · Widget Options

    Critical9.9
  • CVE-2024-35690

    WordPress Widget Options plugin <= 4.0.1 - Subscriber+ User Meta Data Exposure Vulnerability

    MarketingFire · Widget Options

    Medium6.5
  • CVE-2026-2052

    Widget Options <= 4.2.2 - Authenticated (Contributor+) Remote Code Execution via Display Logic

    marketingfire · Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets

    High8.8
  • CVE-2025-8483

    Discussion Board – WordPress Forum Plugin <= 2.5.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution

    marketingfire · Discussion Board – WordPress Forum Plugin

    Medium6.3
  • CVE-2025-10580

    Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

    marketingfire · Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets

    Medium6.4
  • CVE-2024-8672

    Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution

    marketingfire · Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets

    Critical9.9
  • CVE-2023-36520

    WordPress Editorial Calendar Plugin <= 3.7.12 is vulnerable to Insecure Direct Object References (IDOR)

    MarketingFire · Editorial Calendar

    Medium5.4
All 9 in the list