Threats tagged 'ghsa-pqqr-8pmv-5qrf'

CVE-2026-116852 is a critical remote code execution vulnerability affecting Widget Options versions up to and including 4.2.5. It allows an authenticated author-level user to execute arbitrary code on the affected system without user interaction. The vulnerability is identified as CWE-94, indicating improper control of code generation. No specific affected versions beyond "<= 4.2.5" are provided, and no patch or remediation details are available in the input data.