Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-6443

All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin's they acquired. This makes it possible for the threat actor to maintain a persistent backdoor and inject spam into the affected sites.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:a0ae57f82dd804000b2d120659052c4bd793cc1e4ae16c0bce616556b0c1cb37
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 22 assertions

{"defaultStatus":"unaffected","product":"WP Logo Showcase Responsive Slider and Carousel","vendor":"essentialplugin","versions":[{"status":"affected","version":"3.8.7"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/19

{"defaultStatus":"unaffected","product":"WP Featured Content and Slider","vendor":"essentialplugin","versions":[{"status":"affected","version":"1.7.6"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/4

{"defaultStatus":"unaffected","product":"Post grid and filter ultimate","vendor":"essentialplugin","versions":[{"status":"affected","version":"1.7.4"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/3

{"defaultStatus":"unaffected","product":"Video gallery and Player","vendor":"essentialplugin","versions":[{"status":"affected","version":"2.8.7"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/14

{"defaultStatus":"unaffected","product":"WP Responsive Recent Post Slider/Carousel","vendor":"essentialplugin","versions":[{"status":"affected","version":"3.7.1"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/17

{"defaultStatus":"unaffected","product":"WP Slick Slider and Image Carousel","vendor":"essentialplugin","versions":[{"status":"affected","version":"3.7.8.1"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/18

{"defaultStatus":"unaffected","product":"Meta Slider and Carousel with Lightbox","vendor":"essentialplugin","versions":[{"status":"affected","version":"2.0.8"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/7

{"defaultStatus":"unaffected","product":"WP Blog and Widgets","vendor":"essentialplugin","versions":[{"status":"affected","version":"2.6.6"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/10

{"defaultStatus":"unaffected","product":"Testimonial Grid and Testimonial Slider plus Carousel with Rotator Widget","vendor":"essentialplugin","versions":[{"status":"affected","version":"3.5.6"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/16

{"defaultStatus":"unaffected","product":"Trending/Popular Post Slider and Widget","vendor":"essentialplugin","versions":[{"status":"affected","version":"1.8.6"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/6

{"defaultStatus":"unaffected","product":"Team Slider and Team Grid Showcase plus Team Carousel","vendor":"essentialplugin","versions":[{"status":"affected","version":"2.8.6"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/13

{"defaultStatus":"unaffected","product":"Countdown Timer Ultimate","vendor":"essentialplugin","versions":[{"status":"affected","version":"2.6.9"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/11

{"defaultStatus":"unaffected","product":"Blog Designer – Post and Widget","vendor":"essentialplugin","versions":[{"status":"affected","version":"2.7.7"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/12

{"defaultStatus":"unaffected","product":"Album and Image Gallery Plus Lightbox","vendor":"essentialplugin","versions":[{"status":"affected","version":"2.1.8"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/8

{"defaultStatus":"unaffected","product":"Featured Post Creative","vendor":"essentialplugin","versions":[{"status":"affected","version":"1.5.7"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/2

{"defaultStatus":"unaffected","product":"WP responsive FAQ with category plugin","vendor":"essentialplugin","versions":[{"status":"affected","version":"3.9.5"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/20

{"defaultStatus":"unaffected","product":"Timeline and History slider","vendor":"essentialplugin","versions":[{"status":"affected","version":"2.4.5"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/9

{"defaultStatus":"unaffected","product":"Popup Maker and Popup Anything – Popup for opt-ins and Lead Generation Conversions","vendor":"essentialplugin","versions":[{"status":"affected","version":"2.9.1"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/15

{"defaultStatus":"unaffected","product":"WP News and Scrolling Widgets","vendor":"essentialplugin","versions":[{"status":"affected","version":"5.0.6"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/21

{"defaultStatus":"unaffected","product":"Portfolio and Projects","vendor":"essentialplugin","versions":[{"status":"affected","version":"1.5.6"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Accordion and Accordion Slider","vendor":"essentialplugin","versions":[{"status":"affected","version":"1.4.6"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/0

{"defaultStatus":"unaffected","product":"Post Ticker Ultimate","vendor":"essentialplugin","versions":[{"status":"affected","version":"1.7.6"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/5

Affected products and versions

22 source assertions
{"defaultStatus":"unaffected","product":"WP Logo Showcase Responsive Slider and Carousel","vendor":"essentialplugin","versions":[{"status":"affected","version":"3.8.7"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/19
{"defaultStatus":"unaffected","product":"WP Featured Content and Slider","vendor":"essentialplugin","versions":[{"status":"affected","version":"1.7.6"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/4
{"defaultStatus":"unaffected","product":"Post grid and filter ultimate","vendor":"essentialplugin","versions":[{"status":"affected","version":"1.7.4"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/3
{"defaultStatus":"unaffected","product":"Video gallery and Player","vendor":"essentialplugin","versions":[{"status":"affected","version":"2.8.7"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/14
{"defaultStatus":"unaffected","product":"WP Responsive Recent Post Slider/Carousel","vendor":"essentialplugin","versions":[{"status":"affected","version":"3.7.1"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/17
{"defaultStatus":"unaffected","product":"WP Slick Slider and Image Carousel","vendor":"essentialplugin","versions":[{"status":"affected","version":"3.7.8.1"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/18
{"defaultStatus":"unaffected","product":"Meta Slider and Carousel with Lightbox","vendor":"essentialplugin","versions":[{"status":"affected","version":"2.0.8"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/7
{"defaultStatus":"unaffected","product":"WP Blog and Widgets","vendor":"essentialplugin","versions":[{"status":"affected","version":"2.6.6"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/10
{"defaultStatus":"unaffected","product":"Testimonial Grid and Testimonial Slider plus Carousel with Rotator Widget","vendor":"essentialplugin","versions":[{"status":"affected","version":"3.5.6"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/16
{"defaultStatus":"unaffected","product":"Trending/Popular Post Slider and Widget","vendor":"essentialplugin","versions":[{"status":"affected","version":"1.8.6"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/6
{"defaultStatus":"unaffected","product":"Team Slider and Team Grid Showcase plus Team Carousel","vendor":"essentialplugin","versions":[{"status":"affected","version":"2.8.6"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/13
{"defaultStatus":"unaffected","product":"Countdown Timer Ultimate","vendor":"essentialplugin","versions":[{"status":"affected","version":"2.6.9"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/11
{"defaultStatus":"unaffected","product":"Blog Designer – Post and Widget","vendor":"essentialplugin","versions":[{"status":"affected","version":"2.7.7"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/12
{"defaultStatus":"unaffected","product":"Album and Image Gallery Plus Lightbox","vendor":"essentialplugin","versions":[{"status":"affected","version":"2.1.8"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/8
{"defaultStatus":"unaffected","product":"Featured Post Creative","vendor":"essentialplugin","versions":[{"status":"affected","version":"1.5.7"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/2
{"defaultStatus":"unaffected","product":"WP responsive FAQ with category plugin","vendor":"essentialplugin","versions":[{"status":"affected","version":"3.9.5"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/20
{"defaultStatus":"unaffected","product":"Timeline and History slider","vendor":"essentialplugin","versions":[{"status":"affected","version":"2.4.5"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/9
{"defaultStatus":"unaffected","product":"Popup Maker and Popup Anything – Popup for opt-ins and Lead Generation Conversions","vendor":"essentialplugin","versions":[{"status":"affected","version":"2.9.1"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/15
{"defaultStatus":"unaffected","product":"WP News and Scrolling Widgets","vendor":"essentialplugin","versions":[{"status":"affected","version":"5.0.6"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/21
{"defaultStatus":"unaffected","product":"Portfolio and Projects","vendor":"essentialplugin","versions":[{"status":"affected","version":"1.5.6"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Accordion and Accordion Slider","vendor":"essentialplugin","versions":[{"status":"affected","version":"1.4.6"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/0
{"defaultStatus":"unaffected","product":"Post Ticker Ultimate","vendor":"essentialplugin","versions":[{"status":"affected","version":"1.7.6"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/affected/5

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":9.8,"baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-506","description":"CWE-506 Embedded Malicious Code","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/problemTypes/0/descriptions/0

Source references

2 source assertions
{"url":"https://anchor.host/someone-bought-30-wordpress-plugins-and-planted-a-backdoor-in-all-of-them/"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/references/1
{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2597724a-9a39-4e46-b153-f42366f833ba?source=cve"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4396e3126f3c669571af9f9f8b2cd52face3a49bb2426940e8fd64099739af21 · sha256:bb417142e63a20d4… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer