Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets

Information

Software Type Plugin
Software Slug widget-options (view on wordpress.org)
Software Status Active
Software Author marketingfire
Software Website widget-options.com
Software Downloads 4,440,355
Software Active Installs 100,000
Software Record Last Updated July 21, 2026

9 Vulnerabilities

Submit a Vulnerability
Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets <= 4.2.3 - Authenticated (Contributor+) Remote Code Execution
8.8
CVE-2026-54823
Jun 17, 2026
Researcher: daroo
Widget Options <= 4.2.2 - Authenticated (Contributor+) Remote Code Execution via Display Logic
8.8
CVE-2026-2052
May 1, 2026
Researchers: bashu, stealthcopter
Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets <= 4.1.3 - Authenticated (Contributor+) Remote Code Execution
8.8
CVE-2026-27984
Mar 2, 2026
Researcher: Drew Webber (mcdruid)
Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-10580
Oct 24, 2025
Researcher: Nguyen Ngoc Quang Bach (maysbachs)
Widget Options <= 4.1.0 - Authenticated (Contributor+) Remote Code Execution
8.8
CVE-2025-22630
Feb 11, 2025
Researcher: Tran Nguyen Bao Khanh
Widget Options <= 4.0.8 - Missing Authorization to Notice Dismissal
4.3
CVE-2025-22722
Jan 15, 2025
Researcher: Trương Hữu Phúc (truonghuuphuc)
Widget Options <= 4.0.6.1 - Missing Authorization
4.3
CVE-2024-56219
Dec 19, 2024
Researcher: Rafie Muhammad
Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution
9.9
CVE-2024-8672
Nov 27, 2024
Researcher: Webbernaut
Widget Options - Extended <= 5.1.0 & Widget Options <= 4.0.1 - Authenticated (Subscriber+) Information Disclosure
4.3
CVE-2024-35691
Jun 6, 2024
Researcher: Dave Jong
Title Status CVE ID CVSS Researchers Date
Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets <= 4.2.3 - Authenticated (Contributor+) Remote Code Execution Patched CVE-2026-54823 8.8 daroo June 17, 2026
Widget Options <= 4.2.2 - Authenticated (Contributor+) Remote Code Execution via Display Logic Patched CVE-2026-2052 8.8 bashu, stealthcopter May 1, 2026
Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets <= 4.1.3 - Authenticated (Contributor+) Remote Code Execution Patched CVE-2026-27984 8.8 Drew Webber (mcdruid) March 2, 2026
Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-10580 6.4 Nguyen Ngoc Quang Bach (maysbachs) October 24, 2025
Widget Options <= 4.1.0 - Authenticated (Contributor+) Remote Code Execution Patched CVE-2025-22630 8.8 Tran Nguyen Bao Khanh February 11, 2025
Widget Options <= 4.0.8 - Missing Authorization to Notice Dismissal Patched CVE-2025-22722 4.3 Trương Hữu Phúc (truonghuuphuc) January 15, 2025
Widget Options <= 4.0.6.1 - Missing Authorization Patched CVE-2024-56219 4.3 Rafie Muhammad December 19, 2024
Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution Patched CVE-2024-8672 9.9 Webbernaut November 27, 2024
Widget Options - Extended <= 5.1.0 & Widget Options <= 4.0.1 - Authenticated (Subscriber+) Information Disclosure Patched CVE-2024-35691 4.3 Dave Jong June 6, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation