Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Vendor: Blocksera Clear all filters
TI-2025-35792 CVE-2025-57939 · GHSA-6j8h-gf2h-9mvh

WordPress Image Hover Effects – Elementor Addon Plugin <= 1.4.4 - Broken Access Control Vulnerability

Priority LOW 30

Missing Authorization vulnerability in Blocksera Image Hover Effects – Elementor Addon image-hover-effects-addon-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Im…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00359 Published 2025-09-22 No fix listed CWE-862
TI-2025-22295 CVE-2025-31025 · GHSA-cf7x-fj46-85vx

WordPress Image Hover Effects Block plugin <= 1.4.5 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Blocksera Image Hover Effects Block image-hover-effects-block allows Stored XSS.This issue affects Image Hover Effects…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00269 Published 2025-06-06 No fix listed CWE-79
TI-2025-22702 CVE-2025-31539 · GHSA-3m95-wfxh-25xv

WordPress Cryptocurrency Widgets Pack plugin <= 2.0.1 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in Blocksera Cryptocurrency Widgets Pack cryptocurrency-widgets-pack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cryptocurrency Widgets P…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00387 Published 2025-03-31 No fix listed CWE-862
TI-2024-04453 CVE-2024-4780 · GHSA-mjq3-v6c5-g93p

Cross-site scripting in Blocksera Image Hover Effects – Elementor Addon

Priority LOW 29

The Image Hover Effects – Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘eihe_link’ parameter in all versions up to, and including, 1.4.3 due to insufficient input sanitization…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00453 Published 2024-07-16 No fix listed CWE-79
TI-2024-01081 CVE-2024-1166 · GHSA-p4q2-hmcp-5f94

Cross-site scripting in Blocksera Image Hover Effects – Elementor Addon

Priority LOW 28

The Image Hover Effects – Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Hover Effects Widget in all versions up to, and including, 1.4.1 due to insufficient inpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00325 Published 2024-05-09 No fix listed CWE-79
TI-2024-19703 CVE-2024-29936 · GHSA-w98h-wrpq-r4p5

WordPress Image Hover Effects – Elementor Addon plugin <= 1.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Blocksera Image Hover Effects – Elementor Addon allows Stored XSS.This issue affects Image Hover Effects – Elementor A…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00339 Published 2024-03-27 No fix listed CWE-79
TI-2022-03724 CVE-2022-4059 · GHSA-g37r-pfrh-94h3

Cryptocurrency Widgets Pack < 2.0 - Unauthenticated SQLi

Priority HIGH 82

The Cryptocurrency Widgets Pack WordPress plugin before 2.0 does not sanitise and escape some parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0509 Published 2023-01-02 Fixed in 2.0 CWE-89
TI-2021-14977 CVE-2021-36888 · GHSA-8fjw-gv37-439q

Improper access control in Biplob Adhikari Image Hover Effects Ultimate

Priority MEDIUM 58

Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate (versions <= 9.6.1) WordPress plugin.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06532 Published 2021-12-15 No fix listed CWE-284
TI-2021-06556 CVE-2021-24264 · GHSA-xcgj-2vw3-2j5p

Image Hover Effects - Elementor Addon < 1.3.4 - Contributor+ Stored XSS

Priority LOW 25

The “Image Hover Effects – Elementor Addon” WordPress Plugin before 1.3.4 has a widget that is vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0059 Published 2021-05-05 Fixed in 1.3.4 CWE-79