CVE Intelligence

Essentialplugin Portfolio and Projects vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Essentialplugin Portfolio and Projects: 2 record(s), with affected versions and fixes.

CVE-2026-6443 Critical · 9.8 CWE-506 Apr 17, 2026
Essentialplugin WordPress Plugins: Embedded Backdoor (CWE-506)
All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin's they acquired. This makes it possible for the threat actor to maintain a persistent backdoor and inject spam into the affected sites.
CVE-2025-67470 Medium · 4.3 CWE-497 Dec 9, 2025
WordPress Portfolio and Projects plugin <= 1.5.5 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Essential Plugin Portfolio and Projects portfolio-and-projects allows Retrieve Embedded Sensitive Data.This issue affects Portfolio and Projects: from n/a through <= 1.5.5.