OX
Vendor
Oxilab
24
CVEs
0
On KEV
0
New 30D
Products
IH7.2
Image Hover Effects Ultimate
Oxilab
7 CVEs0 on KEV0 new
AC7.2
Accordions
Oxilab
5 CVEs0 on KEV0 new
SA9.1
Shortcode Addons
Oxilab
4 CVEs0 on KEV0 new
IH6.1
Image Hover Effects For Elementor With Lightbox And Flipbox
Oxilab
3 CVEs0 on KEV0 new
RT7.2
Responsive Tabs
Oxilab
2 CVEs0 on KEV0 new
FL7.2
Flipbox
Oxilab
1 CVEs0 on KEV0 new
IH6.4
Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier )
oxilab
1 CVEs0 on KEV0 new
PL6.1
Product Layouts for WooCommerce
oxilab
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-13362 | PL Product Layouts for WooCommerce oxilab | 6.1 | May 1 | Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter |
| CVE-2025-5092 | IH Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) oxilab | 6.4 | Nov 20 | Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library |
| CVE-2024-37120 | RT Responsive Tabs Oxilab | 4.8 | Jul 22 | WordPress Tabs plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-37121 | SA Shortcode Addons Oxilab | 4.8 | Jul 22 | WordPress Shortcode Addons plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-37122 | AC Accordions Oxilab | 4.8 | Jul 22 | WordPress Accordions plugin <= 2.3.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-37546 | IH Image Hover Effects For Elementor With Lightbox And Flipbox Oxilab | 5.4 | Jul 6 | WordPress Image Hover Effects for Elementor with Lightbox and Flipbox plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-5001 | IH Image Hover Effects For Elementor With Lightbox And Flipbox Oxilab | 5.4 | Jun 6 | Image Hover Effects for Elementor with Lightbox and Flipbox <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id, oxi_addons_f_title_tag, and content_description_tag Parameters |
| CVE-2024-31114 | SA Shortcode Addons Oxilab | 9.1 | Mar 31 | WordPress Shortcode Addons <= 3.2.5 - Arbitrary File Upload vulnerability |
| CVE-2023-25962 | AC Accordions Oxilab | 4.8 | May 4 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Biplob Adhikari Accordion – Multiple Accordion or FAQs Builder plugin <= 2.3.0 versions |
| CVE-2022-45831 | IH Image Hover Effects For Elementor With Lightbox And Flipbox Oxilab | 6.1 | Mar 28 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in biplob018 Image Hover Effects for Elementor with Lightbox and Flipbox plugin <= 2.8 versions |
| CVE-2022-4207 | IH Image Hover Effects Ultimate Oxilab | 5.4 | Dec 13 | The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several values that can be added to an Image Hover in versions 9.8.1 to… |
| CVE-2022-45082 | AC Accordions Oxilab | 4.8 | Nov 18 | Multiple Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabilities in Accordions plugin <= 2.0.3 on WordPress via &addons-style-name and &accordions_or_faqs_license_key |
| CVE-2022-42459 | IH Image Hover Effects Ultimate Oxilab | 7.2 | Nov 18 | Auth. WordPress Options Change vulnerability in Image Hover Effects Ultimate plugin <= 9.7.1 on WordPress |
| CVE-2022-38104 | AC Accordions Oxilab | 7.2 | Oct 21 | WordPress Accordions plugin <= 2.0.3 - Auth. WordPress Options Change vulnerability |
| CVE-2022-2937 | IH Image Hover Effects Ultimate Oxilab | 5.4 | Sep 23 | The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Title & Description values that can be added to an Image Hover in… |
| CVE-2022-2936 | IH Image Hover Effects Ultimate Oxilab | 5.4 | Sep 6 | The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Video Link values that can be added to an Image Hover in versions up to, and… |
| CVE-2022-2935 | IH Image Hover Effects Ultimate Oxilab | 5.4 | Sep 6 | The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Media Image URL value that can be added to an Image Hover in versions up… |
| CVE-2022-33970 | SA Shortcode Addons Oxilab | 7.2 | Jul 27 | Authenticated WordPress Options Change vulnerability in Biplob018 Shortcode Addons plugin <= 3.1.2 at WordPress |
| CVE-2022-36375 | RT Responsive Tabs Oxilab | 7.2 | Jul 25 | Authenticated (high role user) WordPress Options Change vulnerability in Biplob Adhikari's Tabs plugin <= 3.6.0 at WordPress |
| CVE-2022-33969 | FL Flipbox Oxilab | 7.2 | Jul 25 | Authenticated WordPress Options Change vulnerability in Biplob Adhikari's Flipbox plugin <= 2.6.0 at WordPress |
| CVE-2022-34487 | SA Shortcode Addons Oxilab | 5.3 | Jul 21 | Unauthenticated Arbitrary Option Update vulnerability in biplob018's Shortcode Addons plugin <= 3.0.2 at WordPress |
| CVE-2022-33198 | AC Accordions Oxilab | 5.3 | Jul 21 | Unauthenticated WordPress Options Change vulnerability in Biplob Adhikari's Accordions plugin <= 2.0.2 at WordPress |
| CVE-2022-29424 | IH Image Hover Effects Ultimate Oxilab | 4.8 | May 20 | Authenticated (admin or higher user role) Reflected Cross-Site Scripting (XSS) vulnerability in Biplob Adhikari's Image Hover Effects Ultimate plugin <= 9.7.1 at WordPress |
| CVE-2021-25031 | IH Image Hover Effects Ultimate Oxilab | 6.1 | Jan 24 | The Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) WordPress plugin before 9.7.1 does not escape the effects parameter before outputting… |