MarketingFire vulnerabilities
We track 4 vulnerabilities in MarketingFire products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
Latest MarketingFire vulnerabilities
- 8.8 High severity
Widget Options – Advanced Conditional…: Improper Control of Generation of Code
The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 4.2.6.1 via the `post_content` parameter. This is due to asymmetric parsing b
- 8.8 High severity
Widget Options – Advanced Conditional…: Improper Control of Generation of Code
The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.2 via the Display Logic feature. This is due to the plugin using e
- 9.9 Critical severity
Widget Options – Advanced Conditional…: Improper Control of Generation of Code
The Widget Options – The #1 WordPress Widget & Block Control Plugin plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.0.7 via the display logic functionality that extends several page builders. This is due to t
- 8.1 High severity
Editorial Calendar: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in MarketingFire Editorial Calendar.This issue affects Editorial Calendar: from n/a through 3.7.12.