Essentialplugin vulnerabilities

Products

• Accordion And Accordion Slider 3
• Album And Image Gallery Plus Lightbox 3
• Popup Anything 3
• Wp Logo Showcase Responsive Slider And Carousel 2

Newest

• essential plugin wp logo showcase responsive slider and carousel WordPress WP Logo Showcase Responsive Slider and Carousel plugin <= 3.6 - Broken Access Control vulnerability CVE-2023-40200 5.3 MediumJune 11, 2026
• essentialplugin essential chat support Essential Chat Support <= 1.0.1 - Missing Authorization to Unauthenticated Settings Reset via 'ecs_reset_settings' Parameter CVE-2026-8681 5.3 MediumMay 16, 2026
• essential plugin featured post creative, meta slider and carousel with lightbox, portfolio and projects +19 more +21 more Essentialplugin Plugins (Various Versions) - Injected Backdoor CVE-2026-6443 9.8 CriticalApril 17, 2026
• essentialplugin album and image gallery plus lightbox Album and Image Gallery Plus Lightbox <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin's Shortcode CVE-2025-13612 6.4 MediumFebruary 19, 2026
• essentialplugin accordion and accordion slider Accordion and Accordion Slider <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Attachment Metadata Modification CVE-2026-0727 5.4 MediumFebruary 14, 2026
• essentialplugin accordion and accordion slider WordPress Accordion and Accordion Slider plugin <= 1.2.4 - Broken Access Control CVE-2023-39996 5.3 MediumDecember 13, 2024
• essential plugin meta slider and carousel with lightbox WordPress Meta slider and carousel with lightbox plugin <= 1.6.2 - Broken Access Control vulnerability CVE-2023-25703 5.3 MediumDecember 9, 2024
• essential plugin featured post creative WordPress Featured Post Creative plugin <= 1.2.7 - Broken Access Control vulnerability CVE-2023-30488 5.3 MediumDecember 9, 2024
• essentialplugin preloader, wp onlinesupport, essential plugin preloader for website +1 more WordPress Preloader for Website plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerability CVE-2023-48273 5.3 MediumJune 11, 2024
• essentialplugin album and image gallery plus lightbox Album and Image Gallery plus Lightbox <= 2.0 - Unauthenticated Arbitrary Shortcode Execution CVE-2024-4194 6.5 MediumJune 6, 2024
• essentialplugin audio player with playlist ultimate WordPress Audio Player with Playlist Ultimate Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS) CVE-2023-38516 6.5 MediumSeptember 3, 2023
• essentialplugin hero banner ultimate WordPress Hero Banner Ultimate Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS) CVE-2022-45818 6.5 MediumMay 4, 2023
• essentialplugin popup anything, wp onlinesupport, essential plugin popup anything – a marketing popup and lead generation conversions +1 more WordPress Popup Anything Plugin <= 2.2.1 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2022-38077 4.3 MediumMarch 29, 2023
• unknown product slider and carousel with category for woocommerce, essentialplugin product slider and carousel with category with woocommerce +1 more Product Slider and Carousel with Category for WooCommerce < 2.8 - Contributor+ Stored XSS via Shortcode CVE-2022-4791 5.4 MediumFebruary 21, 2023
• unknown post category image with grid and slider, essentialplugin download post category image with grid and slider +1 more Post Category Image With Grid and Slider < 1.4.8 - Contributor+ Stored XSS via Shortcode CVE-2022-4747 5.4 MediumFebruary 6, 2023
• essentialplugin wp blog and widget, unknown wp blog and widgets +1 more WP Blog and Widget < 2.3.1 - Contributor+ Stored XSS via Shortcode CVE-2022-4824 5.4 MediumFebruary 6, 2023
• essentialplugin popup anything, unknown popup anything – a marketing popup and lead generation conversions +1 more Popup Anything < 2.1.7 - Reflected Cross-Site Scripting CVE-2022-2115 6.1 MediumJuly 25, 2022
• essentialplugin popup anything, unknown popup anything – a marketing popup +1 more Popup Anything < 2.0.4 - Contributor+ Stored Cross-Site Scripting CVE-2021-24883 5.4 MediumNovember 29, 2021