Approved changes feed: RSS · Atom

cpe:2.3:a:wp_onlinesupport,_essential_plugin:hero_banner_ultimate:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWp Onlinesupport, Essential Plugin (8161a097-9f60-5f67-85cf-55a3afef38ba)
ProductHero Banner Ultimate (7d994c4e-03a1-550b-8347-1a600767af9e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-22305 vulnerable 2026-06-08 07:10:52.811997 WordPress Hero Banner Ultimate plugin <= 1.4.4 - Local File Inclusion vulnerability
MEDIUM (6.5)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Essential Plugin Hero Banner Ultimate hero-banner-ultimate allows PHP Local File Inclusion.This issue affects Hero Banner Ultimate: from n/a through <= 1.4.4.
Published: 2025-01-07T10:48:58.187Z
Updated: 2026-04-28T16:10:58.922Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45818 vulnerable 2026-06-08 05:50:37.267196 WordPress Hero Banner Ultimate Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (6.5)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WP OnlineSupport, Essential Plugin Hero Banner Ultimate plugin <= 1.3.4 versions.
Published: 2023-05-04T12:54:12.629Z
Updated: 2026-04-28T16:07:53.181Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.