Widget Logic Visual vulnerabilities

2 known vulnerabilities in Widget Logic Visual from Totalbounty. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Widget Logic Visual: Unrestricted Upload of File with Dangerous Type

  CVE-2026-14158Jul 8, 2026Totalbounty

  The Widget Logic Visual plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.52 via the widget_logic_visual_check_visibility function. This is due to missing capability check and nonce verification on the widget-l

• 7.1 High severity

  Widget Logic Visual: Improper Neutralization of Input During Web Page Generation

  CVE-2025-68842Feb 20, 2026Totalbounty

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in totalbounty Widget Logic Visual widget-logic-visual allows Reflected XSS.This issue affects Widget Logic Visual: from n/a through <= 1.52.