WordPress Widget Options Plugin Code Injection Vulnerability Allowing Remote Code Execution

A code injection vulnerability has been identified in the WordPress Widget Options plugin, specifically in versions through 4.1.3. This vulnerability allows for remote code execution, enabling attackers to execute commands on the affected website, potentially leading to unauthorized access and control over the site.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected website, which could be used to gain backdoor access and full control over the site.

Remediation

Users are advised to update to a version of the WordPress Widget Options plugin later than 4.1.3. Patchstack has also issued a mitigation rule to block attacks targeting this vulnerability until an official patch can be safely applied.