Blocksera
7 CVEs across 5 Blocksera products. Browse Blocksera vulnerabilities, severities, and proof-of-concept exploits.
Blocksera products with known CVEs
Blocksera CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-57939 | Medium | 5.3 | 2025-09-22 | Missing Authorization vulnerability in Blocksera Image Hover Effects – Elementor Addon image-hover-effects-addon-for-elementor allows Exploiting Incorrectly Co… |
CVE-2025-31025 | Medium | 6.5 | 2025-06-06 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Blocksera Image Hover Effects Block image-hover-effects-b… |
CVE-2025-31539 | Medium | 6.5 | 2025-03-31 | Missing Authorization vulnerability in Blocksera Cryptocurrency Widgets Pack cryptocurrency-widgets-pack allows Exploiting Incorrectly Configured Access Contro… |
CVE-2024-4780 | Medium | 6.4 | 2024-07-16 | The Image Hover Effects – Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘eihe_link’ parameter in all versions up to… |
CVE-2024-1166 | Medium | 6.4 | 2024-05-14 | The Image Hover Effects – Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Hover Effects Widget in all… |
CVE-2024-29936 | Medium | 6.5 | 2024-03-27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Blocksera Image Hover Effects – Elementor Addon allows St… |
CVE-2022-4059 | Critical | 9.8 | 2023-01-02 | The Cryptocurrency Widgets Pack WordPress plugin before 2.0 does not sanitise and escape some parameter before using it in a SQL statement via an AJAX action a… |
CVE-2022-44588 | Critical | 9.9 | 2022-12-15 | Unauth. SQL Injection vulnerability in Cryptocurrency Widgets Pack Plugin <=1.8.1 on WordPress. |
CVE-2021-36888 | Critical | 9.8 | 2021-12-15 | Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate (versions <= 9.6.1) WordPr… |
CVE-2021-24264 | Medium | 5.4 | 2021-05-05 | The “Image Hover Effects – Elementor Addon” WordPress Plugin before 1.3.4 has a widget that is vulnerable to stored Cross-Site Scripting (XSS) by lower-privile… |