WP OnlineSupport, Essential Plugin
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Accordion and Accordion Slider | 1 | – | Dec 13, 2024 |
| Album and Image Gallery plus Lightbox | 1 | – | Dec 9, 2024 |
| Audio Player with Playlist Ultimate | 1 | – | Sep 3, 2023 |
| Featured Post Creative | 1 | – | Dec 9, 2024 |
| Hero Banner Ultimate | 1 | – | May 4, 2023 |
| Meta slider and carousel with lightbox | 1 | – | Dec 9, 2024 |
| Popup Anything | 1 | – | Apr 18, 2024 |
| Popup Anything – A Marketing Popup and Lead Generation Conversions | 1 | – | Mar 29, 2023 |
| Portfolio and Projects | 1 | – | Dec 13, 2024 |
| Preloader for Website | 1 | – | Jun 11, 2024 |
| Timeline and History slider | 1 | – | Aug 19, 2024 |
| Trending/Popular Post Slider and Widget | 1 | – | Dec 13, 2024 |
Exploited and recent CVEs
- CVE-2023-39996 WordPress Accordion and Accordion Slider plugin <= 1.2.4 - Broken Access Control 0.5%
- CVE-2023-39995 WordPress Portfolio and Projects plugin <= 1.3.7 - Broken Access Control vulnerability 0.5%
- CVE-2022-46846 WordPress Trending/Popular Post Slider and Widget plugin <= 1.5.7 - Broken Access Control vulnerability 0.5%
- CVE-2023-25060 WordPress Album and Image Gallery plus Lightbox plugin <= 1.6.2 - Broken Access Control vulnerability 0.6%
- CVE-2023-25703 WordPress Meta slider and carousel with lightbox plugin <= 1.6.2 - Broken Access Control vulnerability 0.5%
- CVE-2023-30488 WordPress Featured Post Creative plugin <= 1.2.7 - Broken Access Control vulnerability 0.4%
- CVE-2024-43232 WordPress Timeline and History slider plugin <= 2.3 - Local File Inclusion vulnerability 0.5%
- CVE-2023-48273 WordPress Preloader for Website plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerability 0.5%
- CVE-2024-32601 WordPress Popup Anything plugin <= 2.8 - Broken Access Control vulnerability 0.4%
- CVE-2023-38516 WordPress Audio Player with Playlist Ultimate Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2022-45818 WordPress Hero Banner Ultimate Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2022-38077 WordPress Popup Anything Plugin <= 2.2.1 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%