Approved changes feed: RSS · Atom

cpe:2.3:a:essentialplugin:post_ticker_ultimate:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEssentialplugin (7cc9011c-ee3a-5cc4-b415-3927e0ae0329)
ProductPost Ticker Ultimate (f5df1c26-8d0a-597e-9705-fe8b463160b9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-6443 vulnerable 2026-06-03 15:27:55.320649 Essentialplugin Plugins (Various Versions) - Injected Backdoor
CRITICAL (9.8)
All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin's they acquired. This makes it possible for the threat actor to maintain a persistent backdoor and inject spam into the affected sites.
Published: 2026-04-17T06:44:49.128Z
Updated: 2026-04-21T19:53:07.705Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.