Input validation vulnerability in Widget Options – The #1 WordPress Widget & Block Control Plugin 4.0.7

The Widget Options plugin for WordPress, which helps control widgets and blocks, has a security vulnerability in its display logic feature. This vulnerability allows hackers with contributor-level access or higher to run code on the server without proper filtering or permission checks. Although we recommended the vendor to limit the ability to execute commands and only allow administrators to do so, they did not take our advice. While we believe the issue has been patched, we still suggest further strengthening the security measures to reduce any remaining risks.