Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
image-hover-effects-ultimate
WordPress
· Plugin
10 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) <= 9.12.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'oxi_image_comparison_before_text' Parameter
CVE-2026-118056
image-hover-effects-ultimate
WordPress
Medium
Fix reported
2026-11-07
Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library
CVE-2025-5092
gallery-with-thumbnail-slider
ibtana-visual-editor
WordPress
Medium
Fix reported
2025-11-24
Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Media URL
CVE-2022-2935
image-hover-effects-ultimate
WordPress
Medium
Fix reported
2025-03-17
Image Hover Effects Ultimate 9.8.1 - 9.8.4 - Authenticated (Admin+) Stored Cross-Site Scripting
CVE-2022-4207
image-hover-effects-ultimate
WordPress
Medium
Fix reported
2024-01-22
Image Hover Effects Ultimate <= 9.6.1 - Unauthenticated Arbitrary Options Update
CVE-2021-36888
image-hover-effects-ultimate
WordPress
Critical
Fix reported
2024-01-22
Image Hover Effects Ultimate <= 9.7.1 - Reflected Cross-Site Scripting
CVE-2022-29424
image-hover-effects-ultimate
WordPress
Medium
Fix reported
2024-01-22
Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Video Link
CVE-2022-2936
image-hover-effects-ultimate
WordPress
Medium
Fix reported
2024-01-22
Image Hover Effects Ultimate <= 9.7.0 - Reflected Cross-Site Scripting via effects
CVE-2021-25031
image-hover-effects-ultimate
WordPress
Medium
Fix reported
2024-01-22
Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Title & Description
CVE-2022-2937
image-hover-effects-ultimate
WordPress
Medium
Fix reported
2024-01-22
Image Hover Effects Ultimate <= 9.7.1 - Authenticated (Admin+) Arbitrary Options Update
CVE-2022-42459
image-hover-effects-ultimate
WordPress
High
Fix reported
2024-01-22