All products

image-hover-effects-ultimate

WordPress · Plugin
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) <= 9.12.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'oxi_image_comparison_before_text' ParameterCVE-2026-118056 image-hover-effects-ultimate WordPress Medium Fix reported
Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript LibraryCVE-2025-5092 gallery-with-thumbnail-slideribtana-visual-editor WordPress Medium Fix reported
Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Media URLCVE-2022-2935 image-hover-effects-ultimate WordPress Medium Fix reported
Image Hover Effects Ultimate 9.8.1 - 9.8.4 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2022-4207 image-hover-effects-ultimate WordPress Medium Fix reported
Image Hover Effects Ultimate <= 9.6.1 - Unauthenticated Arbitrary Options UpdateCVE-2021-36888 image-hover-effects-ultimate WordPress Critical Fix reported
Image Hover Effects Ultimate <= 9.7.1 - Reflected Cross-Site ScriptingCVE-2022-29424 image-hover-effects-ultimate WordPress Medium Fix reported
Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Video LinkCVE-2022-2936 image-hover-effects-ultimate WordPress Medium Fix reported
Image Hover Effects Ultimate <= 9.7.0 - Reflected Cross-Site Scripting via effectsCVE-2021-25031 image-hover-effects-ultimate WordPress Medium Fix reported
Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Title & DescriptionCVE-2022-2937 image-hover-effects-ultimate WordPress Medium Fix reported
Image Hover Effects Ultimate <= 9.7.1 - Authenticated (Admin+) Arbitrary Options UpdateCVE-2022-42459 image-hover-effects-ultimate WordPress High Fix reported