Log in Start free

Biplob018

Products

ProductCVEsExploitedLatest
Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier)3–Dec 13, 2022
Image Hover Effects for Elementor with Lightbox and Flipbox2–Jun 6, 2024
Shortcode Addons2–Jul 22, 2024
Shortcode Addons (WordPress plugin)2–Jul 27, 2022
Image Hover Effects Ultimate1–Sep 23, 2022
Image Hover Effects - Caption Hover with Carousel1–Jul 6, 2024
Team Showcase and Slider – Team Members Builder1–Nov 9, 2024

Exploited and recent CVEs

  • CVE-2024-51763 High 7.1 WordPress Team Showcase and Slider plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-37121 Medium 5.9 WordPress Shortcode Addons plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-37546 Medium 6.5 WordPress Image Hover Effects for Elementor with Lightbox and Flipbox plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-5001 Medium 6.4 Image Hover Effects for Elementor with Lightbox and Flipbox <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id, oxi_addons_f_title_tag, and content_description_tag Parameters 0.3%
  • CVE-2024-31114 Critical 9.1 WordPress Shortcode Addons <= 3.2.5 - Arbitrary File Upload vulnerability 1.4%
  • CVE-2022-45831 High 7.1 WordPress Image Hover Effects - Caption Hover with Carousel Plugin <= 2.8 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2022-4207 Medium 5.5 The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several values that can be added to an Image Hover in versions 9.8.1 to 9.8.4 due to insufficient 0.6%
  • CVE-2022-2937 Medium 6.4 Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Title & Description 0.6%
  • CVE-2022-2935 Medium 6.4 Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Media URL 0.6%
  • CVE-2022-2936 Medium 6.4 Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Video Link 0.6%
  • CVE-2022-33970 High 7.2 WordPress Shortcode Addons plugin <= 3.1.2 - Authenticated WordPress Options Change vulnerability 1.1%
  • CVE-2022-34487 Critical 9.8 WordPress Shortcode Addons plugin <= 3.0.2 - Unauthenticated Arbitrary Option Update vulnerability 3.3%