Skip to contentWp Onlinesupport, Essential Plugin vulnerabilities
Newest
- essential plugin featured post creative, meta slider and carousel with lightbox, portfolio and projects +19 more +21 moreEssentialplugin Plugins (Various Versions) - Injected BackdoorCVE-2026-64439.8 Critical
- essential plugin hero banner ultimateWordPress Hero Banner Ultimate plugin <= 1.4.4 - Local File Inclusion vulnerabilityCVE-2025-223056.5 Medium
- essentialplugin accordion and accordion sliderWordPress Accordion and Accordion Slider plugin <= 1.2.4 - Broken Access ControlCVE-2023-399965.3 Medium
- essential plugin portfolio and projectsWordPress Portfolio and Projects plugin <= 1.3.7 - Broken Access Control vulnerabilityCVE-2023-399954.3 Medium
- wp onlinesupport, essential plugin trending/popular post slider and widgetWordPress Trending/Popular Post Slider and Widget plugin <= 1.5.7 - Broken Access Control vulnerabilityCVE-2022-468465.3 Medium
- wp onlinesupport, essential plugin album and image gallery plus lightboxWordPress Album and Image Gallery plus Lightbox plugin <= 1.6.2 - Broken Access Control vulnerabilityCVE-2023-250605.3 Medium
- essential plugin meta slider and carousel with lightboxWordPress Meta slider and carousel with lightbox plugin <= 1.6.2 - Broken Access Control vulnerabilityCVE-2023-257035.3 Medium
- essential plugin featured post creativeWordPress Featured Post Creative plugin <= 1.2.7 - Broken Access Control vulnerabilityCVE-2023-304885.3 Medium
- wp onlinesupport, essential plugin timeline and history sliderWordPress Timeline and History slider plugin <= 2.3 - Local File Inclusion vulnerabilityCVE-2024-432328.5 High
- essentialplugin preloader, wp onlinesupport, essential plugin preloader for website +1 moreWordPress Preloader for Website plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerabilityCVE-2023-482735.3 Medium
- wordpress popup anythingWordPress Popup Anything plugin <= 2.8 - Broken Access Control vulnerabilityCVE-2024-326015.3 Medium
- essentialplugin audio player with playlist ultimateWordPress Audio Player with Playlist Ultimate Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)CVE-2023-385166.5 Medium
- essentialplugin hero banner ultimateWordPress Hero Banner Ultimate Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)CVE-2022-458186.5 Medium
- essentialplugin popup anything, wp onlinesupport, essential plugin popup anything – a marketing popup and lead generation conversions +1 moreWordPress Popup Anything Plugin <= 2.2.1 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2022-380774.3 Medium
- essentialplugin popup anything, unknown popup anything – a marketing popup and lead generation conversions +1 morePopup Anything < 2.1.7 - Reflected Cross-Site ScriptingCVE-2022-21156.1 Medium