WordPress Widget Options plugin <= 4.2.5 - Remote Code Execution (RCE) vulnerability

Summary

Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions.

Remediation

1. Inventory every Marketing Fire Widget Options deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Referencehttps://patchstack.com/database/wordpress/plugin/widget-options/vulnerability/wordpress-widget-options-plugin-4-2-5-remote-code-execution-rce-vulnerability?_s_id=cve