Description

WordPress Plugin Image Widget is prone to an unspecified vulnerability. No available information exists regarding this issue and it's impact on a vulnerable website. WordPress Plugin Image Widget version 4.1.2 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 4.2 or latest

References

https://wordpress.org/plugins/image-widget/changelog/

Related Vulnerabilities

WordPress Plugin External Media without Import Cross-Site Scripting (1.0.1)

Drupal Core 8.x.x Remote Code Execution (8.0.0 - 8.3.8)

Chamilo Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2025-50197)

phpMyAdmin Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2009-1285)

PostgreSQL Use of Externally-Controlled Format String Vulnerability (CVE-2026-6474)

Severity

High

Tags

Missing Update