Radar sectionsPlugins & themes
Check my site

WordPress plugin

Featured Post Creative security & vulnerabilities

featured-post-creative— active installsLast vulnerability Apr 9, 2026

No known unpatched vulnerabilities in the latest version

All 5 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

5Known vulnerabilities
  • Critical1
  • High0
  • Medium4
  • Low0
Vulnerabilities per year
2023: 3 vulnerabilities3232025: 1 vulnerability1252026: 1 vulnerability126

All Featured Post Creative vulnerabilities

Featured Post Creative vulnerabilities
SeverityVulnerabilityCVEPublished
Critical9.8Injected Backdoor
2.9.1 – 2.9.1Update to 2.9.1.1
CVE-2026-6443
Medium4.3Missing Authorization
≤1.5.5Update to 1.5.6
CVE-2025-66106
Medium5.3Missing Authorization to Notice Dismissal
≤2.7Update to 2.8
CVE-2023-40200
Medium4.3Cross-Site Request Forgery via wpfp_update_featured_post
≤1.2.7Update to 1.2.8
—
Medium5.3Missing Authorization via wpfp_update_featured_post
≤1.2.7Update to 1.2.8
CVE-2023-30488

Featured Post Creative: common questions

Does Featured Post Creative have known vulnerabilities?

Yes. VulnCrest Radar lists 5 known vulnerabilities in Featured Post Creative: 1 critical, 4 medium. None are known to affect version null.

How do I check which version of Featured Post Creative I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Featured Post Creative vulnerability?

CVE-2026-6443, published Apr 9, 2026: Essentialplugin Plugins (Various Versions) - Injected Backdoor. Severity: Critical (CVSS 9.8).

Is any Featured Post Creative vulnerability listed in CISA KEV?

No. None of the known Featured Post Creative vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Are you sure?