{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2026-6443",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2026-6443",
    "idYear": 2026,
    "status": "PUBLISHED",
    "publishedAt": "2026-04-17T06:44:49.128Z",
    "updatedAt": "2026-04-21T19:53:07.705Z",
    "importedAt": "2026-10-24T01:58:25.636Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "Essentialplugin Plugins (Various Versions) - Injected Backdoor",
      "summary": "All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin's they acquired. This makes it possible for the threat actor to maintain a persistent backdoor and inject spam into the affected sites.",
      "affected": [
        {
          "vendor": "essentialplugin",
          "product": "Accordion and Accordion Slider",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "1.4.6",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "essentialplugin",
          "product": "Portfolio and Projects",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "1.5.6",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "essentialplugin",
          "product": "Featured Post Creative",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "1.5.7",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "essentialplugin",
          "product": "Post grid and filter ultimate",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "1.7.4",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "essentialplugin",
          "product": "WP Featured Content and Slider",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "1.7.6",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "essentialplugin",
          "product": "Post Ticker Ultimate",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "1.7.6",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "essentialplugin",
          "product": "Trending/Popular Post Slider and Widget",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "1.8.6",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "essentialplugin",
          "product": "Meta Slider and Carousel with Lightbox",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "2.0.8",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "essentialplugin",
          "product": "Album and Image Gallery Plus Lightbox",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "2.1.8",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "essentialplugin",
          "product": "Timeline and History slider",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "2.4.5",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "essentialplugin",
          "product": "WP Blog and Widgets",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "2.6.6",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "essentialplugin",
          "product": "Countdown Timer Ultimate",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "2.6.9",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "essentialplugin",
          "product": "Blog Designer – Post and Widget",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "2.7.7",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "essentialplugin",
          "product": "Team Slider and Team Grid Showcase plus Team Carousel",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "2.8.6",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "essentialplugin",
          "product": "Video gallery and Player",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "2.8.7",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "essentialplugin",
          "product": "Popup Maker and Popup Anything – Popup for opt-ins and Lead Generation Conversions",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "2.9.1",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "essentialplugin",
          "product": "Testimonial Grid and Testimonial Slider plus Carousel with Rotator Widget",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "3.5.6",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "essentialplugin",
          "product": "WP Responsive Recent Post Slider/Carousel",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "3.7.1",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "essentialplugin",
          "product": "WP Slick Slider and Image Carousel",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "3.7.8.1",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "essentialplugin",
          "product": "WP Logo Showcase Responsive Slider and Carousel",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "3.8.7",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "essentialplugin",
          "product": "WP responsive FAQ with category plugin",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "3.9.5",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "essentialplugin",
          "product": "WP News and Scrolling Widgets",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "5.0.6",
              "status": "affected"
            }
          ]
        }
      ]
    }
  }
}