PLUGIN SECURITY
Is So Widgets Bundle safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the So Widgets Bundle WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
so-widgets-bundle
Known vulnerabilities
- CVE-2023-6295 — SiteOrigin Widgets Bundle [so-widgets-bundle] < 1.51.0 (Path Traversal) · High
- SiteOrigin Widgets Bundle [so-widgets-bundle] < 1.58.2
- CVE-2024-0961 — SiteOrigin Widgets Bundle [so-widgets-bundle] < 1.58.2 (XSS) · Medium
- CVE-2024-1058 — SiteOrigin Widgets Bundle [so-widgets-bundle] < 1.58.4 (XSS) · Medium
- CVE-2024-1070 — SiteOrigin Widgets Bundle [so-widgets-bundle] < 1.58.3 (XSS) · Medium
+ 7 more known vulnerabilities
- CVE-2024-1723 — SiteOrigin Widgets Bundle [so-widgets-bundle] < 1.58.8 (XSS) · Medium
- CVE-2024-4362 — SiteOrigin Widgets Bundle [so-widgets-bundle] < 1.61.0 (XSS) · Medium
- CVE-2024-5090 — SiteOrigin Widgets Bundle [so-widgets-bundle] < 1.62.0 (XSS) · Medium
- CVE-2024-5901 — SiteOrigin Widgets Bundle [so-widgets-bundle] < 1.62.3 (XSS) · Medium
- CVE-2024-54268 — SiteOrigin Widgets Bundle [so-widgets-bundle] < 1.64.1 (Missing Authorization) · Medium
- CVE-2025-5585 — SiteOrigin Widgets Bundle [so-widgets-bundle] < 1.69.0 (XSS) · Medium
- CVE-2026-2127 — SiteOrigin Widgets Bundle [so-widgets-bundle] < 1.71.0
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.