Login Request a demo
IW
Product
Image Widget
by StellarWP · last CVE Apr 29, 2026
2
CVEs
0
On KEV
5.9
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 0Medium 2Low 0
Severity
All severities2Critical0High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Image Widget to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-42643
5.9
0%
Apr 29
WordPress Image Widget plugin <= 4.4.11 - Cross Site Scripting (XSS) vulnerability
Affected: through 4.4.11
CVE-2024-10939
4.8
0%
Dec 13
Image Widget < 4.4.11 - Admin+ Stored XSS
Affected: before 4.4.11
Showing 2