Widget Options vulnerabilities

2 known vulnerabilities in Widget Options from Marketing Fire. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  Widget Options: Improper Control of Generation of Code

  CVE-2026-27984Mar 5, 2026Marketing Fire

  Improper Control of Generation of Code ('Code Injection') vulnerability in Marketing Fire Widget Options widget-options allows Code Injection.This issue affects Widget Options: from n/a through <= 4.1.3.

• 9.9 Critical severity

  Widget Options: Improper Neutralization of Special Elements used in a Command

  CVE-2025-22630Feb 14, 2025Marketing FireEPSS 1.14%

  Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Marketing Fire Widget Options widget-options allows OS Command Injection.This issue affects Widget Options: from n/a through <= 4.1.0.