WordPress security by component

Widget Settings Importer/Exporter

Plugin description

Widget Settings Importer/Exporter is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 23, 2023; the highest CVE/CNA score is 7.4.

Plugin slug: widget-settings-importer-exporter

Latest vulnerability

CVE-2020-36769: Widget Settings Importer/Exporter: Cross-site scripting

Widget Settings Importer/Exporter is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedDec 23, 2023

Safe version guidanceSee mitigation notes

		Safe version
Dec 23, 2023	CVE-2020-36769 Widget Settings Importer/Exporter: Cross-site scripting Widget Settings Importer/Exporter is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE7.4 NVD5.4