Blocksera

10 CVEs across 5 Blocksera products. Browse Blocksera vulnerabilities, severities, and proof-of-concept exploits.

Blocksera products with known CVEs

ProductCVEs
Image Hover Effects – Elementor Addon4
Cryptocurrency Widgets Pack2
Cryptocurrency Widgets Pack2
Image Hover Effects2
Image Hover Effects Block1
Blocksera CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-57939Medium5.32025-09-22Missing Authorization vulnerability in Blocksera Image Hover Effects – Elementor Addon image-hover-effects-addon-for-elementor allows Exploiting Incorrectly Co…
CVE-2025-31025Medium6.52025-06-06Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Blocksera Image Hover Effects Block image-hover-effects-b…
CVE-2025-31539Medium6.52025-03-31Missing Authorization vulnerability in Blocksera Cryptocurrency Widgets Pack cryptocurrency-widgets-pack allows Exploiting Incorrectly Configured Access Contro…
CVE-2024-4780Medium6.42024-07-16The Image Hover Effects – Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘eihe_link’ parameter in all versions up to…
CVE-2024-1166Medium6.42024-05-14The Image Hover Effects – Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Hover Effects Widget in all…
CVE-2024-29936Medium6.52024-03-27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Blocksera Image Hover Effects – Elementor Addon allows St…
CVE-2022-4059Critical9.82023-01-02The Cryptocurrency Widgets Pack WordPress plugin before 2.0 does not sanitise and escape some parameter before using it in a SQL statement via an AJAX action a…
CVE-2022-44588Critical9.92022-12-15Unauth. SQL Injection vulnerability in Cryptocurrency Widgets Pack Plugin <=1.8.1 on WordPress.
CVE-2021-36888Critical9.82021-12-15Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate (versions <= 9.6.1) WordPr…
CVE-2021-24264Medium5.42021-05-05The “Image Hover Effects – Elementor Addon” WordPress Plugin before 1.3.4 has a widget that is vulnerable to stored Cross-Site Scripting (XSS) by lower-privile…