IH
Product
Image Hover Effects Ultimate
7
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 6Low 0
Watch
Add Image Hover Effects Ultimate to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-42459 | 7.2 | Nov 18 | Auth. WordPress Options Change vulnerability in Image Hover Effects Ultimate plugin <= 9.7.1 on WordPress Affected: through 9.7.1 |
| CVE-2021-25031 | 6.1 | Jan 24 | The Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) WordPress plugin before 9.7.1 does not escape the effects parameter before outputting… Affected: before 9.7.1 |
| CVE-2022-4207 | 5.4 | Dec 13 | The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several values that can be added to an Image Hover in versions 9.8.1 to… Affected: 9.8.1 through 9.8.4 |
| CVE-2022-2937 | 5.4 | Sep 23 | The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Title & Description values that can be added to an Image Hover in… Affected: before 9.8.0 |
| CVE-2022-2936 | 5.4 | Sep 6 | The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Video Link values that can be added to an Image Hover in versions up to, and… Affected: through 9.7.3 |
| CVE-2022-2935 | 5.4 | Sep 6 | The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Media Image URL value that can be added to an Image Hover in versions up… Affected: through 9.7.3 |
| CVE-2022-29424 | 4.8 | May 20 | Authenticated (admin or higher user role) Reflected Cross-Site Scripting (XSS) vulnerability in Biplob Adhikari's Image Hover Effects Ultimate plugin <= 9.7.1 at WordPress Affected: through 9.7.1 |
Showing 7
