N/A
2017-06-23< 2.7
Display Widgets < 2.7 - SEO Spam Injection (Hidden Functionality)
Minimum safe version
2.7
Update to 2.7 or later to address 4 fixable vulnerabilities
Display Widgets < 2.7 - SEO Spam Injection (Hidden Functionality)
Display Widgets 2.6.0-2.6.3.1 - Backdoored
WordPress Display Widgets Plugin <= 2.03 - Cross Site Scripting
WordPress Display Widgets plugin 2.6.0-2.6.3.1 - Backdoored (includes hacking tool)
CVE-2015-9438