What’s Vulnerable › Products

Livemesh SiteOrigin Widgets vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Livemesh SiteOrigin Widgets version is affected

Latest Livemesh SiteOrigin Widgets vulnerabilities

• CVE-2026-3896 — Livemesh SiteOrigin Widgets <= 3.9.2 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting (CVSS 6.4)
• CVE-2025-8780 — Livemesh SiteOrigin Widgets <= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Hero Header and Pricing Table Widgets (CVSS 6.4)
• CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)