Essential Plugin
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Slider a SlidersPack | 2 | – | Dec 9, 2025 |
| Featured Post Creative | 1 | – | Nov 21, 2025 |
| Hero Banner Ultimate | 1 | – | Jan 7, 2025 |
| Meta slider and carousel with lightbox | 1 | – | Oct 6, 2024 |
| Portfolio and Projects | 1 | – | Dec 9, 2025 |
| WP Logo Showcase Responsive Slider and Carousel | 1 | – | Jun 11, 2026 |
Exploited and recent CVEs
- CVE-2023-40200 WordPress WP Logo Showcase Responsive Slider and Carousel plugin <= 3.6 - Broken Access Control vulnerability 0.2%
- CVE-2022-46845 WordPress Slider a SlidersPack plugin <= 2.0.2 - Broken Access Control vulnerability 0.3%
- CVE-2025-67470 WordPress Portfolio and Projects plugin <= 1.5.5 - Sensitive Data Exposure vulnerability 0.3%
- CVE-2025-66106 WordPress Featured Post Creative plugin <= 1.5.5 - Broken Access Control vulnerability 0.2%
- CVE-2025-32152 WordPress Slider a SlidersPack Plugin <= 2.3 - Local File Inclusion vulnerability 1.1%
- CVE-2025-22305 WordPress Hero Banner Ultimate plugin <= 1.4.4 - Local File Inclusion vulnerability 0.6%
- CVE-2024-47307 WordPress Meta Slider and Carousel with Lightbox plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability 0.3%