Skip to content
OpenAdvisories

Vendor

essentialplugin

5 known vulnerabilities.

essentialplugin at a glance

Last 12 months
4
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 2 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 2 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 1 vulnerability, 1 critical May 2026: 1 vulnerability June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202610
Apr 202611
Mar 202600
Feb 202620
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Album and Image Gallery Plus Lightbox 3 Accordion and Accordion Slider 2 Essential Chat Support 1 Portfolio and Projects 1 Featured Post Creative 1 Post grid and filter ultimate 1 WP Featured Content and Slider 1 Post Ticker Ultimate 1 Trending/Popular Post Slider and Widget 1 Meta Slider and Carousel with Lightbox 1 Timeline and History slider 1 WP Blog and Widgets 1 Countdown Timer Ultimate 1 Blog Designer – Post and Widget 1 Team Slider and Team Grid Showcase plus Team Carousel 1 Video gallery and Player 1 Popup Maker and Popup Anything – Popup for opt-ins and Lead Generation Conversions 1 Testimonial Grid and Testimonial Slider plus Carousel with Rotator Widget 1 WP Responsive Recent Post Slider/Carousel 1 WP Slick Slider and Image Carousel 1 WP Logo Showcase Responsive Slider and Carousel 1 WP responsive FAQ with category plugin 1 WP News and Scrolling Widgets 1
All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Medium 5.3
    CVE-2026-8681

    Essential Chat Support <= 1.0.1 - Missing Authorization to Unauthenticated Settings Reset via 'ecs_reset_settings' Parameter

    The Essential Chat Support plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.0.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unau…

    essentialplugin Essential Chat Support Web / CMS
  • Critical 9.8
    CVE-2026-6443

    Essentialplugin Plugins (Various Versions) - Injected Backdoor

    All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin's they acquired. This makes it possible for…

    essentialplugin Album and Image Gallery Plus Lightbox Accordion and Accordion Slider WP Blog and Widgets
  • Medium 6.4
    CVE-2025-13612

    Album and Image Gallery Plus Lightbox <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin's Shortcode

    The Album and Image Gallery plus Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `aigpl-gallery-album` shortcode in all versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping…

    essentialplugin Album and Image Gallery Plus Lightbox Web / CMS
  • Medium 5.4
    CVE-2026-0727

    Accordion and Accordion Slider <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Attachment Metadata Modification

    The Accordion and Accordion Slider plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.5. This is due to the plugin not properly verifying that a user is authorized to perform an action in the 'wp_aas_save_atta…

    essentialplugin Accordion and Accordion Slider Web / CMS
  • Medium 6.5
    CVE-2024-4194

    Album and Image Gallery plus Lightbox <= 2.0 - Unauthenticated Arbitrary Shortcode Execution

    The The Album and Image Gallery plus Lightbox plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.0. This is due to the software allowing users to execute an action that does not properly validate a valu…

    essentialplugin Album and Image Gallery Plus Lightbox Web / CMS