Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Blocksera Component: Image Hover Effects Clear all filters
TI-2021-14977 CVE-2021-36888 · GHSA-8fjw-gv37-439q

Improper access control in Biplob Adhikari Image Hover Effects Ultimate

Priority MEDIUM 58

Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate (versions <= 9.6.1) WordPress plugin.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06532 Published 2021-12-15 No fix listed CWE-284
TI-2021-06556 CVE-2021-24264 · GHSA-xcgj-2vw3-2j5p

Image Hover Effects - Elementor Addon < 1.3.4 - Contributor+ Stored XSS

Priority LOW 25

The “Image Hover Effects – Elementor Addon” WordPress Plugin before 1.3.4 has a widget that is vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0059 Published 2021-05-05 Fixed in 1.3.4 CWE-79