plugin

Display Widget Vulnerabilities

1 known security issue reported for the Display Widget WordPress plugin. Most recent disclosed Jun 23, 2017.

1 critical

Running Display Widget on your site? Check whether your installed version is affected.

Display Widgets < 2.7 - SEO Spam Injection (Hidden Functionality)

critical

The Display Widgets plugin for WordPress is vulnerable to a developer-created backdoor that injected SEOspam into sites in versions up to, and including, 2.6.3.1. Any added content is hidden from logged-in users.

CVSS:: 9.8
Affected:: up to 2.7
Fixed in:: 2.7
Disclosed:: Jun 23, 2017

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database