Essentialplugin Plugins (Various Versions) - Injected Backdoor
critical
All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin's they acquired. This makes it possible for the threat actor to maintain a persistent backdoor and injec...
- CVSS:
- 9.8
- Affected:
- 1.8.6 – 1.8.6
- Fixed in:
- 1.8.6.1
- Disclosed:
- Apr 9, 2026
CVE-2026-6443 on NVD →
Trending/Popular Post Slider and Widget [wp-trending-post-slider-and-widget] < 1.5.8
unknown
[en] Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Trending/Popular Post Slider and Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trending/Popular Post Slider and Widget: from n/a through 1.5.7.
- Affected:
- up to 1.5.8
- Fixed in:
- 1.5.8
- Disclosed:
- Dec 13, 2024
CVE-2022-46846 on NVD →
Multiple WPOnlineSupport Plugins <= (Various Versions) - Missing Authorization to Notice Dismissal
medium
Multiple WPOnlineSupport plugins for WordPress are vulnerable to unauthorized modification of data due to a missing capability check on the wpos_anylc_admin_init_process() function hooked via admin_init in various versions. This makes it possible for unauthenticated attackers to dismiss a license notice.
- CVSS:
- 5.3
- Affected:
- up to 1.6
- Fixed in:
- 1.6.1
- Disclosed:
- Aug 16, 2023
CVE-2023-40200 on NVD →
Trending/Popular Post Slider and Widget <= 1.5.7 - Cross-Site Request Forgery via wtpsw_post_view_count
medium
The Trending/Popular Post Slider and Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce verification on the wtpsw_post_view_count() function in versions up to, and including, 1.5.7. This makes it possible for unauthenticated attackers to increment the post view count via a forg...
- CVSS:
- 4.3
- Affected:
- up to 1.5.7
- Fixed in:
- 1.5.8
- Disclosed:
- Mar 30, 2023
CVE-2022-46846 on NVD →
Trending/Popular Post Slider and Widget [wp-trending-post-slider-and-widget] < 1.6.1
unknown
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
- Affected:
- up to 1.6.1
- Fixed in:
- 1.6.1
CVE-2023-40200 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database