These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A critical vulnerability was found in the Widget Options plugin, affecting versions up to 4.2.3. This vulnerability allows a remote attacker to execute arbitrary code on the affected system.
CVE-2024-35690 is a medium-severity vulnerability in the MarketingFire Widget Options plugin for WordPress, affecting versions from n/a to 4.0.1. The issue allows for the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Organizations using this plugin should take immediate action to mitigate potential risks. The vulnerability has a CVSS score of 6.5 and is [truncated]