WP OnlineSupport, Essential Plugin

Records29All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

WP OnlineSupport, Essential Plugin records in CISA KEV

No WP OnlineSupport, Essential Plugin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Popup Anything 3 records LOW Album And Image Gallery Plus Lightbox 1 record LOW Audio Player With Playlist Ultimate 1 record LOW Download Post Category Image With Grid And Slider 1 record MEDIUM Hero Banner Ultimate 1 record LOW Product Slider And Carousel With Category With Woocommerce 1 record MEDIUM Wp Blog And Widget 1 record MEDIUM

Records

1 record in Audio Player With Playlist Ultimate · all components

TI-2023-19896 CVE-2023-38516 · GHSA-mwf6-68p7-pjwf

WordPress Audio Player with Playlist Ultimate Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WP OnlineSupport, Essential Plugin Audio Player with Playlist Ultimate plugin <= 1.2.2 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00361 Published 2023-09-03 No fix listed CWE-79

Open these records in search →

Critical	1
High	4
Medium	24
Low	0
No CVSS	0