WordPress Widget & Block Control Plugin Security Update Advisory (CVE-2024-8672)
Overview
An update has been released to address vulnerabilities in WordPress Widget & Block Control Plugin. Users of the affected versions are advised to update to the latest version.
Affected Products
CVE-2024-8672
- Widget Options versions: ~ 4.0.7 (inclusive)
Resolved Vulnerabilities
Vulnerability that allows remote code execution via the eval() function by an authenticated user (CVE-2024-8672)
Vulnerability Patches
Vulnerability Patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
CVE-2024-8672
- Widget Options version: 4.0.8
Referenced Sites
[1] CVE-2024-8672 Detail
https://nvd.nist.gov/vuln/detail/CVE-2024-8672
[2] Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 – Authenticated (Contributor+) Remote Code Execution