WordPress Vulnerability Scanner WPSec
Vulnerabilities / Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets

Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets vulnerabilities

Advisories WPSec published for Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets. Other sources may list more. Its attack surface: Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-27 WPSEC-2026-1715 Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets <= 4.2.5 - Authenticated (Contributor+) Remote Code Execution via SiteOrigin Page Builder Display Logic High 7.5 4.2.6
2026-10-27 WPSEC-2026-1714 Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets <= 4.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Custom ID and Class Attributes Medium 6.4 4.2.6

License: CC BY 4.0