Approved changes feed: RSS · Atom

cpe:2.3:a:blocksera:image_hover_effects:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorBlocksera (aae0a482-ba10-5b6c-bcdd-32d7112c8011)
ProductImage Hover Effects (1106ebbb-c2fa-5944-b56a-2ffdc040dc49)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-36888 vulnerable 2026-06-08 05:32:52.666719 WordPress Image Hover Effects Ultimate plugin <= 9.6.1 - Unauthenticated Arbitrary Options Update leading to full website compromise
CRITICAL (9.8)
Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate (versions <= 9.6.1) WordPress plugin.
Published: 2021-12-15T18:06:58.217Z
Updated: 2026-04-28T16:07:36.288Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24264 vulnerable 2026-06-08 05:30:04.077748 Image Hover Effects - Elementor Addon < 1.3.4 - Contributor+ Stored XSS
The “Image Hover Effects – Elementor Addon” WordPress Plugin before 1.3.4 has a widget that is vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.
Published: 2021-05-05T18:28:46.000Z
Updated: 2024-08-03T19:28:22.758Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.