Skip to content
PluginCanary

SiteOrigin Widgets Bundle

by Greg - SiteOrigin · 400,000+ active installs · Checked 3 Nov 2026
Healthy2 Warnings

Healthy: vulnerability published 9 Oct 2026, fixed in 1.75.0.

84/ 100 Canary Score
Sub-scores for SiteOrigin Widgets Bundle
Ownership100
Maintenance100
Security70
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 1.75.0. Update to version 1.75.0 or later.9 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 1 Oct 2026, fixed in 1.74.0. Update to version 1.74.0 or later.1 Oct 2026Evidence
  • InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
gpriday1 Jun 2014 to 28 Sep 2020, 234 commits
SiteOrigin12 Nov 2020 to 31 Oct 2026, 296 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
4 days ago
Releases, 24 months
36
Tested up to
7.1 current
Requires PHP
7.0.0 supported 8.2+
Releases per quarter for SiteOrigin Widgets Bundle
Q1 202413
Q2 20247
Q3 20244
Q4 20246
Q1 20256
Q2 20257
Q3 20253
Q4 20254
Q1 20262
Q2 20263
Q3 20265
Q4 20262

Last release 31 Oct 2026. Tested with WordPress 7.1 (current).

Support

50% of 4 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
9 Oct 2026SiteOrigin Widgets Bundle <= 1.74.3 - Authenticated (Contributor+) Arbitrary File Read via LESS Injection via [siteorigin_widget] Shortcode 'value' JSON Instance (design.colors LESS Variable)6.5<= 1.74.31.75.00
1 Oct 2026SiteOrigin Widgets Bundle <= 1.73.2 - Authenticated (Contributor+) Local File Inclusion via 'theme' Parameter7.5<= 1.73.21.74.00
17 Feb 2026SiteOrigin Widgets Bundle <= 1.70.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution5.4<= 1.70.41.71.00
24 Jun 2025SiteOrigin Widgets Bundle <= 1.68.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-url` DOM Element Attribute6.4<= 1.68.51.69.00
10 Dec 2024SiteOrigin Widgets Bundle <= 1.64.0 - Missing Authorization4.3<= 1.64.01.64.14
30 Jul 2024SiteOrigin Widgets Bundle <= 1.62.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Image Grid widget6.4<= 1.62.21.62.30
10 Jun 2024SiteOrigin Widgets Bundle <= 1.61.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via SiteOrigin Blog Widget6.4<= 1.61.11.62.00
21 May 2024SiteOrigin Widgets Bundle <= 1.60.0 - - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode6.4<= 1.60.01.61.00
4 Mar 2024SiteOrigin Widgets Bundle <= 1.58.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.58.71.58.80
12 Feb 2024SiteOrigin Widgets Bundle <= 1.58.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.58.31.58.40
12 Feb 2024SiteOrigin Widgets Bundle <= 1.58.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.58.21.58.30
29 Jan 2024SiteOrigin Widgets Bundle <= 1.58.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.58.11.58.20
27 Nov 2023SiteOrigin Widgets Bundle < 1.51.0 - Authenticated (Admin+) Local File Inclusion5.9<= 1.50.11.51.00

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for SiteOrigin Widgets Bundle
Q1 20244.0
Q2 20245.0
Q1 20255.0
Q2 20255.0

Average rating rose from 4.0 to 5.0 between Q1 2024 and Q2 2025.

Rating distribution
5 star126
4 star4
3 star3
2 star0
1 star1

Momentum

400,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for SiteOrigin Widgets Bundle
4 May 20266,822
11 May 202613,371
18 May 2026160,141
25 May 202623,739
1 Jun 202615,365
8 Jun 202612,692
15 Jun 202611,293
22 Jun 20269,775
29 Jun 2026132,604
6 Jul 202632,139
13 Jul 2026259,747
20 Jul 2026143,941
27 Jul 202630,419
3 Aug 202629,453
10 Aug 202614,732
17 Aug 202613,067
24 Aug 202619,520
31 Aug 202613,297
7 Sep 20269,318
14 Sep 20269,577
21 Sep 2026145,641
28 Sep 2026141,204
5 Oct 202646,395
12 Oct 202621,959
19 Oct 202624,437
26 Oct 2026128,039
2 Nov 20269,507

Weekly downloads over the last 4 weeks are 16% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline)Score 93 · 70,000+Xpro Theme Builder For Elementor - FREEScore 93 · 20,000+Ultimate Addons for Beaver Builder (UABB)Score 93 · 20,000+Header Footer Builder for ElementorScore 92 · 30,000+Conditional Fields for Elementor Form - Apply Conditional LogicScore 92 · 10,000+

Facts

Version1.76.0
AuthorGreg - SiteOrigin
Added1 Jun 2014
Last updated31 Oct 2026
Active installs400,000+
Requires WordPress4.2
Tested up to7.1.4
Requires PHP7.0.0
CategoryDesign & Themes > Page Builders & Visual Editors
Tagsblog, blocks, slider, widgets, contact form

Other plugins by this author: Page Builder by SiteOrigin, SiteOrigin CSS, Masonry Widget, Focus Videos, Simple Options, Easy Reader, Theme Checklist, Exercise Images by Everkinetic, Secure Image Resizer

Questions

Is SiteOrigin Widgets Bundle still maintained?

SiteOrigin Widgets Bundle was last updated on 31 Oct 2026. Its Canary status is Healthy.

Is SiteOrigin Widgets Bundle safe?

SiteOrigin Widgets Bundle has no open unpatched vulnerabilities on record. 5 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns SiteOrigin Widgets Bundle?

The wordpress.org author is Greg - SiteOrigin. Recent committers: SiteOrigin, gpriday, plugin-master. We have recorded no ownership change.

What can I use instead of SiteOrigin Widgets Bundle?

Plugins in the same category with a higher Canary Score: Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline), Xpro Theme Builder For Elementor - FREE, Ultimate Addons for Beaver Builder (UABB), Header Footer Builder for Elementor, Conditional Fields for Elementor Form - Apply Conditional Logic.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue