WP OnlineSupport, Essential Plugin

Records29All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

WP OnlineSupport, Essential Plugin records in CISA KEV

No WP OnlineSupport, Essential Plugin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Popup Anything 3 records LOW Album And Image Gallery Plus Lightbox 1 record LOW Audio Player With Playlist Ultimate 1 record LOW Download Post Category Image With Grid And Slider 1 record MEDIUM Hero Banner Ultimate 1 record LOW Product Slider And Carousel With Category With Woocommerce 1 record MEDIUM Wp Blog And Widget 1 record MEDIUM

Records

1 record in Album And Image Gallery Plus Lightbox · all components

TI-2024-03901 CVE-2024-4194 · GHSA-jvx5-mmf7-496q

Album and Image Gallery plus Lightbox <= 2.0 - Unauthenticated Arbitrary Shortcode Execution

LOW 39

The The Album and Image Gallery plus Lightbox plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.0.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00478 Published 2024-06-06 No fix listed CWE-94

Open these records in search →

Critical	1
High	4
Medium	24
Low	0
No CVSS	0