siteorigin_widgets_bundle vulnerabilities

CVEs whose affected-version data names the siteorigin_widgets_bundle package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-92174High· 7.5

yesterday

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.73.2 via the 'theme' parameter parameter

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.73.2 via the 'theme' parameter parameter. This makes it possible for authenticated attackers, with contribut…

▾ Twilightgpriday · SiteOrigin Widgets BundleEPSS 0.56%via NVD