Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.0

Marketing Fire Widget Options allows malicious code to be injected

CVE-2026-27984 · published 8 months ago
Summary

A security issue in Marketing Fire Widget Options allows attackers to inject malicious code, which could allow them to access sensitive information or take control of a website. This affects versions up to 4.1.3 of the widget. Users should update to a fixed version to prevent this issue.

Original advisory text
Improper Control of Generation of Code ('Code Injection') vulnerability in Marketing Fire Widget Options widget-options allows Code Injection.This issue affects Widget Options: from n/a through <= ...
Improper Control of Generation of Code ('Code Injection') vulnerability in Marketing Fire Widget Options widget-options allows Code Injection.This issue affects Widget Options: from n/a through <= 4.1.3.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
9.0 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-94Code Injection
Timeline
Published5 Mar 2026
Updated31 Oct 2026
First seen6 Mar 2026
Sources
CVE-2026-27984 · NVD
Track software like this
Free during beta