Oxilab Image Hover Effects Ultimate
7 CVEs affecting Oxilab Image Hover Effects Ultimate. Latest disclosed: 2022-12-13. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-42459 | High | 7.2 | 2022-11-18 | Auth. WordPress Options Change vulnerability in Image Hover Effects Ultimate plugin <= 9.7.1 on WordPress. |
CVE-2022-2937 | Medium | 6.4 | 2022-09-23 | The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Title & Description values that can be added to an I… |
CVE-2022-2936 | Medium | 6.4 | 2022-09-06 | The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Video Link values that can be added to an Image Hover in… |
CVE-2022-2935 | Medium | 6.4 | 2022-09-06 | The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Media Image URL value that can be added to an Image… |
CVE-2021-25031 | Medium | 6.1 | 2022-01-24 | The Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) WordPress plugin before 9.7.1 does not escape the effects paramete… |
CVE-2022-4207 | Medium | 5.5 | 2022-12-13 | The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several values that can be added to an Image Hover in ve… |
CVE-2022-29424 | Medium | 4.8 | 2022-05-20 | Authenticated (admin or higher user role) Reflected Cross-Site Scripting (XSS) vulnerability in Biplob Adhikari's Image Hover Effects Ultimate plugin <= 9.7.1… |