oxilab Image Hover Effects Ultimate (WordPress plugin) vulnerabilities

Latest oxilab Image Hover Effects Ultimate (WordPress plugin) CVEs

Newest publication first

1. CVE-2021-36888 WordPress Image Hover Effects Ultimate plugin <= 9.6.1 - Unauthenticated Arbitrary Options Update leading to full website compromise

   Published 2021-12-15

   Critical·CVSS 9.8 EPSS 6.5%

   Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate (versions <= 9.6.1) WordPress plugin.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.