Plugin icon

Essential Widgets

essential-widgets

Vulnerabilities:

3

Last Updated:

June 18, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-02-04
Title
Essential Widgets < 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
Fixed in
Fixed in 3.0.1
CVSS
6.4 (medium)
Published
2025-11-26
Title
Essential Widgets < 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.3
CVSS
6.4 (medium)
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Fixed in
Fixed in 1.9
CVSS
5.4 (medium)