Approved changes feed: RSS · Atom

cpe:2.3:a:essentialplugin:featured_post_creative:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEssentialplugin (7cc9011c-ee3a-5cc4-b415-3927e0ae0329)
ProductFeatured Post Creative (8e458f7e-d1d7-55fc-a0b7-c82bf5f23d91)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-6443 vulnerable 2026-06-03 15:27:55.315551 Essentialplugin Plugins (Various Versions) - Injected Backdoor
CRITICAL (9.8)
All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin's they acquired. This makes it possible for the threat actor to maintain a persistent backdoor and inject spam into the affected sites.
Published: 2026-04-17T06:44:49.128Z
Updated: 2026-04-21T19:53:07.705Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30488 vulnerable 2026-06-03 14:51:52.532998 WordPress Featured Post Creative plugin <= 1.2.7 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Featured Post Creative allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Post Creative: from n/a through 1.2.7.
Published: 2024-12-09T11:31:04.599Z
Updated: 2026-04-28T16:08:18.751Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.