Skip to content
OpenAdvisories

Vendor

WP OnlineSupport, Essential Plugin

12 known vulnerabilities.

Products

Preloader for Website 1 Popup Anything – A Marketing Popup and Lead Generation Conversions 1 Timeline and History slider 1 Audio Player with Playlist Ultimate 1 Hero Banner Ultimate 1 Album and Image Gallery plus Lightbox 1 Popup Anything 1 Trending/Popular Post Slider and Widget 1 Portfolio and Projects 1 Meta slider and carousel with lightbox 1 Featured Post Creative 1 Accordion and Accordion Slider 1
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-39996

    WordPress Accordion and Accordion Slider plugin <= 1.2.4 - Broken Access Control

    Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Accordion and Accordion Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accordion and Accordion Slider: from n/a through 1.2.4.

    WP OnlineSupport, Essential Plugin Accordion and Accordion Slider
  • Medium 4.3
    CVE-2023-39995

    WordPress Portfolio and Projects plugin <= 1.3.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Portfolio and Projects allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Portfolio and Projects: from n/a through 1.3.7.

    WP OnlineSupport, Essential Plugin Portfolio and Projects
  • Medium 5.3
    CVE-2022-46846

    WordPress Trending/Popular Post Slider and Widget plugin <= 1.5.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Trending/Popular Post Slider and Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trending/Popular Post Slider and Widget: from n/a thro…

    WP OnlineSupport, Essential Plugin Trending/Popular Post Slider and Widget
  • Medium 5.3
    CVE-2023-25060

    WordPress Album and Image Gallery plus Lightbox plugin <= 1.6.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Album and Image Gallery plus Lightbox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Album and Image Gallery plus Lightbox: from n/a through …

    WP OnlineSupport, Essential Plugin Album and Image Gallery plus Lightbox
  • Medium 5.3
    CVE-2023-25703

    WordPress Meta slider and carousel with lightbox plugin <= 1.6.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Meta slider and carousel with lightbox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta slider and carousel with lightbox: from n/a throug…

    WP OnlineSupport, Essential Plugin Meta slider and carousel with lightbox
  • Medium 5.3
    CVE-2023-30488

    WordPress Featured Post Creative plugin <= 1.2.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Featured Post Creative allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Post Creative: from n/a through 1.2.7.

    WP OnlineSupport, Essential Plugin Featured Post Creative
  • Medium 5.3
    CVE-2023-48273

    WordPress Preloader for Website plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerability

    Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Preloader for Website.This issue affects Preloader for Website: from n/a through 1.2.2.

    WP OnlineSupport, Essential Plugin Preloader for Website
  • Medium 5.3
    CVE-2024-32601

    WordPress Popup Anything plugin <= 2.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Popup Anything.This issue affects Popup Anything: from n/a through 2.8.

    WP OnlineSupport, Essential Plugin Popup Anything
  • Medium 6.5
    CVE-2023-38516

    WordPress Audio Player with Playlist Ultimate Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WP OnlineSupport, Essential Plugin Audio Player with Playlist Ultimate plugin <= 1.2.2 versions.

    WP OnlineSupport, Essential Plugin Audio Player with Playlist Ultimate
  • Medium 6.5
    CVE-2022-45818

    WordPress Hero Banner Ultimate Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WP OnlineSupport, Essential Plugin Hero Banner Ultimate plugin <= 1.3.4 versions.

    WP OnlineSupport, Essential Plugin Hero Banner Ultimate
  • Medium 4.3
    CVE-2022-38077

    WordPress Popup Anything Plugin <= 2.2.1 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in WP OnlineSupport, Essential Plugin Popup Anything – A Marketing Popup and Lead Generation Conversions plugin <= 2.2.1 versions.

    WP OnlineSupport, Essential Plugin Popup Anything – A Marketing Popup and Lead Generation Conversions