Essentialplugin Featured Post Creative vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Essentialplugin Featured Post Creative: 2 record(s), with affected versions and fixes.
CVE-2026-6443
Critical · 9.8
CWE-506 Apr 17, 2026
Essentialplugin WordPress Plugins: Embedded Backdoor (CWE-506)
All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin's they acquired. This makes it possible for the threat actor to maintain a persistent backdoor and inject spam into the affected sites.
CVE-2025-66106
Medium · 4.3
CWE-862 Nov 21, 2025
WordPress Featured Post Creative plugin <= 1.5.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in Essential Plugin Featured Post Creative featured-post-creative allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Post Creative: from n/a through <= 1.5.5.