Vulnerabilities / SiteOrigin Widgets Bundle
SiteOrigin Widgets Bundle vulnerabilities
Advisories WPSec published for SiteOrigin Widgets Bundle. Other sources may list more. Its attack surface: SiteOrigin Widgets Bundle on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-03 | WPSEC-2026-0391 | SiteOrigin Widgets Bundle <= 1.74.3 - Authenticated (Contributor+) Arbitrary File Read via LESS Injection in Widget Style Values | Medium 6.5 | 1.75.0 |
License: CC BY 4.0