Plugin icon

WP Blog and Widgets

wp-blog-and-widgets
Plugin closed

Vulnerabilities:

2

Last Updated:

February 20, 2026

Active Installs:

8000

Published
Title
Fixed in
CVSS
Published
2026-04-13
Title
Multiple Plugins by "Essential Plugin" - Backdoor
Fixed in
Fixed in 2.6.6.1
CVSS
10.0 (critical)
Published
2023-01-12
Title
WP Blog and Widget < 2.3.1 - Contributor+ Stored XSS via Shortcode
Fixed in
Fixed in 2.3.1
CVSS
6.8 (medium)