Skip to content
OpenAdvisories

Vendor

essentialplugin

5 known vulnerabilities.

Products

Album and Image Gallery Plus Lightbox 3 Accordion and Accordion Slider 2 Essential Chat Support 1 Portfolio and Projects 1 Featured Post Creative 1 Post grid and filter ultimate 1 WP Featured Content and Slider 1 Post Ticker Ultimate 1 Trending/Popular Post Slider and Widget 1 Meta Slider and Carousel with Lightbox 1 Timeline and History slider 1 WP Blog and Widgets 1 Countdown Timer Ultimate 1 Blog Designer – Post and Widget 1 Team Slider and Team Grid Showcase plus Team Carousel 1 Video gallery and Player 1 Popup Maker and Popup Anything – Popup for opt-ins and Lead Generation Conversions 1 Testimonial Grid and Testimonial Slider plus Carousel with Rotator Widget 1 WP Responsive Recent Post Slider/Carousel 1 WP Slick Slider and Image Carousel 1 WP Logo Showcase Responsive Slider and Carousel 1 WP responsive FAQ with category plugin 1 WP News and Scrolling Widgets 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-8681

    Essential Chat Support <= 1.0.1 - Missing Authorization to Unauthenticated Settings Reset via 'ecs_reset_settings' Parameter

    The Essential Chat Support plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.0.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unau…

    essentialplugin Essential Chat Support Web / CMS
  • Medium 6.4
    CVE-2025-13612

    Album and Image Gallery Plus Lightbox <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin's Shortcode

    The Album and Image Gallery plus Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `aigpl-gallery-album` shortcode in all versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping…

    essentialplugin Album and Image Gallery Plus Lightbox Web / CMS
  • Medium 5.4
    CVE-2026-0727

    Accordion and Accordion Slider <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Attachment Metadata Modification

    The Accordion and Accordion Slider plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.5. This is due to the plugin not properly verifying that a user is authorized to perform an action in the 'wp_aas_save_atta…

    essentialplugin Accordion and Accordion Slider Web / CMS
  • Medium 6.5
    CVE-2024-4194

    Album and Image Gallery plus Lightbox <= 2.0 - Unauthenticated Arbitrary Shortcode Execution

    The The Album and Image Gallery plus Lightbox plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.0. This is due to the software allowing users to execute an action that does not properly validate a valu…

    essentialplugin Album and Image Gallery Plus Lightbox Web / CMS