WP OnlineSupport, Essential Plugin vulnerabilities
We track 2 vulnerabilities in WP OnlineSupport, Essential Plugin products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 19, 2024.
2vulnerabilities
0critical
2high
0exploited
8.7average CVSS score
Latest WP OnlineSupport, Essential Plugin vulnerabilities
- 8.5 High severity
Timeline and History slider: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP OnlineSupport, Essential Plugin Timeline and History slider allows PHP Local File Inclusion.This issue affects Timeline and History slider: from n/a through 2.3.
- 8.8 High severity
Popup Anything – A Marketing Popup and Lead…: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in WP OnlineSupport, Essential Plugin Popup Anything – A Marketing Popup and Lead Generation Conversions plugin <= 2.2.1 versions.