CVE · High

CVE-2026-92174 — SiteOrigin Widgets Bundle [so-widgets-bundle] < 1.74.0

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-92174 SiteOrigin Widgets Bundle [so-widgets-bundle] < 1.74.0 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') High 7.5 < 1.74.0 1.74.0 2026-02-17 —

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.