Vulnerabilities in WP OnlineSupport, Essential Plugin

12 results

CVE-2023-25060MEDIUMWordPress Album and Image Gallery plus Lightbox plugin <= 1.6.2 - Broken Access Control vulnerabilityEPSS 0.6%CVE-2024-43232HIGHWordPress Timeline and History slider plugin <= 2.3 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2023-25703MEDIUMWordPress Meta slider and carousel with lightbox plugin <= 1.6.2 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2022-46846MEDIUMWordPress Trending/Popular Post Slider and Widget plugin <= 1.5.7 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2023-48273MEDIUMWordPress Preloader for Website plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerabilityEPSS 0.5%CVE-2023-39996MEDIUMWordPress Accordion and Accordion Slider plugin <= 1.2.4 - Broken Access ControlEPSS 0.4%CVE-2024-32601MEDIUMWordPress Popup Anything plugin <= 2.8 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-30488MEDIUMWordPress Featured Post Creative plugin <= 1.2.7 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-39995MEDIUMWordPress Portfolio and Projects plugin <= 1.3.7 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2022-45818MEDIUMWordPress Hero Banner Ultimate Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-38516MEDIUMWordPress Audio Player with Playlist Ultimate Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2022-38077MEDIUMWordPress Popup Anything Plugin <= 2.2.1 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%