CVE-2026-6443

Essentialplugin's WordPress plugins have been compromised by a rogue entity, who secretly inserted a hidden access point into multiple versions of their software during a transfer of ownership. As a result, this malicious code allows unauthorized parties to continuously monitor and manipulate affected websites, including injecting unwanted content.

Based on public CVE data (MITRE/NVD).