Skip to content
OpenAdvisories

Vendor

Essential Plugin

7 known vulnerabilities.

Products

Slider a SlidersPack 2 Featured Post Creative 1 Portfolio and Projects 1 Meta slider and carousel with lightbox 1 Hero Banner Ultimate 1 WP Logo Showcase Responsive Slider and Carousel 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-40200

    WordPress WP Logo Showcase Responsive Slider and Carousel plugin <= 3.6 - Broken Access Control vulnerability

    Authorization bypass through User-Controlled key vulnerability in Essential Plugin WP Logo Showcase Responsive Slider and Carousel allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Logo Showcase Responsive Slider a…

    Essential Plugin WP Logo Showcase Responsive Slider and Carousel
  • Medium 5.3
    CVE-2022-46845

    WordPress Slider a SlidersPack plugin <= 2.0.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Essential Plugin Slider a SlidersPack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slider a SlidersPack: from n/a before 2.3.

    Essential Plugin Slider a SlidersPack
  • Medium 4.3
    CVE-2025-67470

    WordPress Portfolio and Projects plugin <= 1.5.5 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Essential Plugin Portfolio and Projects portfolio-and-projects allows Retrieve Embedded Sensitive Data.This issue affects Portfolio and Projects: from n/a through <= 1…

    Essential Plugin Portfolio and Projects
  • Medium 4.3
    CVE-2025-66106

    WordPress Featured Post Creative plugin <= 1.5.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Essential Plugin Featured Post Creative featured-post-creative allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Post Creative: from n/a through <= 1.5.5.

    Essential Plugin Featured Post Creative
  • Medium 6.5
    CVE-2025-22305

    WordPress Hero Banner Ultimate plugin <= 1.4.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Essential Plugin Hero Banner Ultimate hero-banner-ultimate allows PHP Local File Inclusion.This issue affects Hero Banner Ultimate: from n…

    Essential Plugin Hero Banner Ultimate
  • Medium 6.5
    CVE-2024-47307

    WordPress Meta Slider and Carousel with Lightbox plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Essential Plugin Meta slider and carousel with lightbox meta-slider-and-carousel-with-lightbox allows Stored XSS.This issue affects Meta slider and carousel …

    Essential Plugin Meta slider and carousel with lightbox