Read the docs

WP OnlineSupport, Essential Plugin

Records29All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

WP OnlineSupport, Essential Plugin records in CISA KEV

No WP OnlineSupport, Essential Plugin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Popup Anything 3 records LOW Album And Image Gallery Plus Lightbox 1 record LOW Audio Player With Playlist Ultimate 1 record LOW Download Post Category Image With Grid And Slider 1 record MEDIUM Hero Banner Ultimate 1 record LOW Product Slider And Carousel With Category With Woocommerce 1 record MEDIUM Wp Blog And Widget 1 record MEDIUM

Records

3 records in Popup Anything · all components

TI-2022-01956 CVE-2022-2115 · GHSA-mch4-6f94-27mh

Popup Anything < 2.1.7 - Reflected Cross-Site Scripting

Priority LOW 28

The Popup Anything WordPress plugin before 2.1.7 does not sanitise and escape a parameter before outputting it back in a frontend page, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0067 Published 2022-07-25 Fixed in 2.1.7 CWE-79
TI-2021-07165 CVE-2021-24883 · GHSA-9fv2-2p6h-wc29

Popup Anything < 2.0.4 - Contributor+ Stored Cross-Site Scripting

Priority LOW 26

The Popup Anything WordPress plugin before 2.0.4 does not escape the Link Text and Button Text fields of Popup, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00804 Published 2021-11-29 Fixed in 2.0.4 CWE-79
Open these records in search →