CVE Database /
CVE-2026-42643
CVE · Medium
CVE-2026-42643 — Image Widget [image-widget] < 4.4.12
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-42643
|
Image Widget [image-widget] < 4.4.12 |
— |
Medium
5.9
|
< 4.4.12
|
4.4.12 |
2026-03-17 |
—
|
CVE-2026-42643
The Image Widget plugin for WordPress is susceptible to stored cross-site scripting (XSS) attacks in versions 4.4.11 and earlier. Authenticated users with author permissions or higher can insert malicious scripts into images, which then get executed when other users view the affected pages.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings