Read the docs

WP OnlineSupport, Essential Plugin

Records29All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

WP OnlineSupport, Essential Plugin records in CISA KEV

No WP OnlineSupport, Essential Plugin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Popup Anything 3 records LOW Album And Image Gallery Plus Lightbox 1 record LOW Audio Player With Playlist Ultimate 1 record LOW Download Post Category Image With Grid And Slider 1 record MEDIUM Hero Banner Ultimate 1 record LOW Product Slider And Carousel With Category With Woocommerce 1 record MEDIUM Wp Blog And Widget 1 record MEDIUM

Records

1 record in Download Post Category Image With Grid And Slider · all components

TI-2022-04343 CVE-2022-4747 · GHSA-5qqc-77m4-694h

Post Category Image With Grid and Slider < 1.4.8 - Contributor+ Stored XSS via Shortcode

Priority MEDIUM 58

The Post Category Image With Grid and Slider WordPress plugin before 1.4.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00685 Published 2023-02-06 Fixed in 1.4.8
Open these records in search →