WordPress plugin
Display Widgets security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
1Known vulnerabilities
- Critical0
- High0
- Medium1
- Low0
All Display Widgets vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.4 | Authenticated Cross-Site Scripting ≤2.03Update to 2.04 | CVE-2015-9438 |
- Medium5.4Authenticated Cross-Site Scripting
≤2.03Update to 2.04
Display Widgets: common questions
Does Display Widgets have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Display Widgets: 1 medium. None are known to affect version null.
How do I check which version of Display Widgets I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Display Widgets vulnerability?
CVE-2015-9438, published Aug 11, 2015: Display Widgets <= 2.03 - Authenticated Cross-Site Scripting. Severity: Medium (CVSS 5.4).
Is any Display Widgets vulnerability listed in CISA KEV?
No. None of the known Display Widgets vulnerabilities is currently listed in the CISA KEV catalog.
