CVE-2026-54823: Marketingfire Widget Options

Critical severity, CVSS 9.9. EPSS: 0.8% chance of exploitation in the next 30 days.

Contributor Remote Code Execution (RCE) in Widget Options <= 4.2.3 versions.

Affected products

• Marketingfire Widget Options: up to and including 4.2.3

Published 2026-06-25. Last modified 2026-06-25.