Oxilab Image Hover Effects Ultimate — known CVE vulnerabilities

Every CVE whose affected-product data names Oxilab Image Hover Effects Ultimate, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2022-42459 — CVSS 7.2 (high): Auth. WordPress Options Change vulnerability in Image Hover Effects Ultimate plugin <= 9.7.1 on WordPress.
• CVE-2022-2935 — CVSS 6.4 (medium): The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Media Image URL value that can…
• CVE-2022-2936 — CVSS 6.4 (medium): The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Video Link values that can be added…
• CVE-2022-2937 — CVSS 6.4 (medium): The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Title & Description values that…
• CVE-2021-25031 — CVSS 6.1 (medium): The Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) WordPress plugin before 9.7.1 does not escape…
• CVE-2022-4207 — CVSS 5.5 (medium): The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several values that can be added to…
• CVE-2022-29424 — CVSS 4.8 (medium): Authenticated (admin or higher user role) Reflected Cross-Site Scripting (XSS) vulnerability in Biplob Adhikari's Image Hover Effects…