VYPR

Widget Context Wporg

by Kasparsd

Source repositories

CVEs (1)

  • CVE-2026-7615MedMay 22, 2026
    risk 0.21cvss 4.3epss 0.00

    The Widget Context plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.3. This is due to missing or incorrect nonce validation on the save_widget_context_settings function. This makes it possible for unauthenticated…