Log in Start free

essentialplugin

Products

ProductCVEsExploitedLatest
Album and Image Gallery Plus Lightbox3–Apr 17, 2026
Accordion and Accordion Slider2–Apr 17, 2026
Countdown Timer Ultimate1–Apr 17, 2026
Essential Chat Support1–May 16, 2026
Featured Post Creative1–Apr 17, 2026
Meta Slider and Carousel with Lightbox1–Apr 17, 2026
Popup Maker and Popup Anything – Popup for opt-ins and Lead Generation Conversions1–Apr 17, 2026
Portfolio and Projects1–Apr 17, 2026
Post grid and filter ultimate1–Apr 17, 2026
Post Ticker Ultimate1–Apr 17, 2026
Team Slider and Team Grid Showcase plus Team Carousel1–Apr 17, 2026
Testimonial Grid and Testimonial Slider plus Carousel with Rotator Widget1–Apr 17, 2026
Timeline and History slider1–Apr 17, 2026
Trending/Popular Post Slider and Widget1–Apr 17, 2026
Video gallery and Player1–Apr 17, 2026
WP Blog and Widgets1–Apr 17, 2026
WP Featured Content and Slider1–Apr 17, 2026
WP Logo Showcase Responsive Slider and Carousel1–Apr 17, 2026
WP News and Scrolling Widgets1–Apr 17, 2026
WP responsive FAQ with category plugin1–Apr 17, 2026
WP Responsive Recent Post Slider/Carousel1–Apr 17, 2026
WP Slick Slider and Image Carousel1–Apr 17, 2026
Blog Designer – Post and Widget1–Apr 17, 2026

Exploited and recent CVEs

  • CVE-2026-8681 Medium 5.3 Essential Chat Support <= 1.0.1 - Missing Authorization to Unauthenticated Settings Reset via 'ecs_reset_settings' Parameter 0.3%
  • CVE-2026-6443 Critical 9.8 Essentialplugin Plugins (Various Versions) - Injected Backdoor 0.5%
  • CVE-2026-6443 Critical 9.8 Essentialplugin Plugins (Various Versions) - Injected Backdoor 0.5%
  • CVE-2026-6443 Critical 9.8 Essentialplugin Plugins (Various Versions) - Injected Backdoor 0.5%
  • CVE-2026-6443 Critical 9.8 Essentialplugin Plugins (Various Versions) - Injected Backdoor 0.5%
  • CVE-2026-6443 Critical 9.8 Essentialplugin Plugins (Various Versions) - Injected Backdoor 0.5%
  • CVE-2026-6443 Critical 9.8 Essentialplugin Plugins (Various Versions) - Injected Backdoor 0.5%
  • CVE-2026-6443 Critical 9.8 Essentialplugin Plugins (Various Versions) - Injected Backdoor 0.5%
  • CVE-2026-6443 Critical 9.8 Essentialplugin Plugins (Various Versions) - Injected Backdoor 0.5%
  • CVE-2026-6443 Critical 9.8 Essentialplugin Plugins (Various Versions) - Injected Backdoor 0.5%
  • CVE-2026-6443 Critical 9.8 Essentialplugin Plugins (Various Versions) - Injected Backdoor 0.5%
  • CVE-2026-6443 Critical 9.8 Essentialplugin Plugins (Various Versions) - Injected Backdoor 0.5%
  • CVE-2026-6443 Critical 9.8 Essentialplugin Plugins (Various Versions) - Injected Backdoor 0.5%
  • CVE-2026-6443 Critical 9.8 Essentialplugin Plugins (Various Versions) - Injected Backdoor 0.5%
  • CVE-2026-6443 Critical 9.8 Essentialplugin Plugins (Various Versions) - Injected Backdoor 0.5%
  • CVE-2026-6443 Critical 9.8 Essentialplugin Plugins (Various Versions) - Injected Backdoor 0.5%
  • CVE-2026-6443 Critical 9.8 Essentialplugin Plugins (Various Versions) - Injected Backdoor 0.5%
  • CVE-2026-6443 Critical 9.8 Essentialplugin Plugins (Various Versions) - Injected Backdoor 0.5%
  • CVE-2026-6443 Critical 9.8 Essentialplugin Plugins (Various Versions) - Injected Backdoor 0.5%
  • CVE-2026-6443 Critical 9.8 Essentialplugin Plugins (Various Versions) - Injected Backdoor 0.5%
  • CVE-2026-6443 Critical 9.8 Essentialplugin Plugins (Various Versions) - Injected Backdoor 0.5%
  • CVE-2026-6443 Critical 9.8 Essentialplugin Plugins (Various Versions) - Injected Backdoor 0.5%
  • CVE-2026-6443 Critical 9.8 Essentialplugin Plugins (Various Versions) - Injected Backdoor 0.5%
  • CVE-2025-13612 Medium 6.4 Album and Image Gallery Plus Lightbox <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin's Shortcode 0.4%
  • CVE-2026-0727 Medium 5.4 Accordion and Accordion Slider <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Attachment Metadata Modification 0.3%
  • CVE-2024-4194 Medium 6.5 Album and Image Gallery plus Lightbox <= 2.0 - Unauthenticated Arbitrary Shortcode Execution 0.5%