essentialplugin vulnerabilities
5 published CVEs name essentialplugin among the affected products.
- 5Published CVEs5 of them scored
- 4Last 12 monthspublished in the last year
- 1Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-8681
Essential Chat Support <= 1.0.1 - Missing Authorization to Unauthenticated Settings Reset via 'ecs_reset_settings' Parameter
essentialplugin · Essential Chat Support
Medium5.3 - CVE-2026-6443
Essentialplugin Plugins (Various Versions) - Injected Backdoor
essentialplugin · Accordion and Accordion Slider
Critical9.8 - CVE-2025-13612
Album and Image Gallery Plus Lightbox <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin's Shortcode
essentialplugin · Album and Image Gallery Plus Lightbox
Medium6.4 - CVE-2026-0727
Accordion and Accordion Slider <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Attachment Metadata Modification
essentialplugin · Accordion and Accordion Slider
Medium5.4 - CVE-2024-4194
Album and Image Gallery plus Lightbox <= 2.0 - Unauthenticated Arbitrary Shortcode Execution
essentialplugin · Album and Image Gallery Plus Lightbox
Medium6.5