Totalbounty vulnerabilities
We track 2 vulnerabilities in Totalbounty products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 8, 2026.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest Totalbounty vulnerabilities
- 8.8 High severity
Widget Logic Visual: Unrestricted Upload of File with Dangerous Type
The Widget Logic Visual plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.52 via the widget_logic_visual_check_visibility function. This is due to missing capability check and nonce verification on the widget-l
- 7.1 High severity
Widget Logic Visual: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in totalbounty Widget Logic Visual widget-logic-visual allows Reflected XSS.This issue affects Widget Logic Visual: from n/a through <= 1.52.