Pricing

WordPress security

Instantly fix and mitigate vulnerabilities

Plugin auditing

Paid auditing for WordPress vendors

Managed VDP

Start a security program for your plugin

Bug Bounty

Join the community and earn bounties

Enterprise API

At scale monitoring and vPatching for hosts

Vulnerability database

The latest WordPress security intelligence
Login
Start trial
Popup Anything Logo

Popup Anything

Plugin

Changelog

Claim

VDP

Developer

WP OnlineSupport, Essential Plugin

Latest version

2.8.6

Installations

40,000

Last updated

1 week ago

Vulnerability history

Not fixed 0 present
Fixed 5 patched

Broken Access Control vulnerability <= 2.8

Badge Patch priority: low Fixed

5.3

16 April, 2024

Broken Access Control vulnerability <= 2.7

Badge Patch priority: medium Fixed

5.3

9 November, 2023

CrossSite Request Forgery (CSRF) vulnerability <= 2.2.1

Badge Patch priority: low Fixed

4.3

28 March, 2023

Reflected CrossSite Scripting (XSS) vulnerability <= 2.1.6

Patch priority: high Fixed

6.1

4 July, 2022

Stored CrossSite Scripting (XSS) vulnerability <= 2.0.3

Patch priority: low Fixed

6.9

25 October, 2021

Website security

Pricing For WordPress For WooCommerce For agencies API For hosts Documentation FAQ Log in

For plugin devs

Managed VDP Log inNEW Active programs Security auditing

For researchers

Bug bounty Log inNEW Guidelines LearnNEW Discord

Resources

Vulnerability Database Whitepaper 2024 WordPress StatisticsNEW Case studiesNEW Articles

Patchstack

About Careers AffiliatesNEW Merch store Media kit

Socials

LinkedIn Facebook X
© 2025 Patchstack DPA Privacy Policy Terms & Conditions

Website security

Pricing For WordPress For WooCommerce For agencies API For hosts Documentation FAQ Log in

For plugin devs

Managed VDP Log inNEW Active programs Security auditing

For researchers

Bug bounty Log inNEW Guidelines LearnNEW Discord

Resources

Vulnerability Database Whitepaper 2024 WordPress StatisticsNEW Case studiesNEW Articles

Patchstack

About Careers AffiliatesNEW Merch store Media kit

Socials

LinkedIn Facebook X
Mobile Menu

Let us know if we have missed a vulnerability reported elsewhere

Mobile Menu Close

Thank you for contributing!

Close Mobile Menu