Blocksera
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Image Hover Effects – Elementor Addon | 4 | – | Sep 22, 2025 |
| Cryptocurrency Widgets Pack | 2 | – | Mar 31, 2025 |
| Image Hover Effects Block | 1 | – | Jun 6, 2025 |
Exploited and recent CVEs
- CVE-2025-57939 WordPress Image Hover Effects – Elementor Addon Plugin <= 1.4.4 - Broken Access Control Vulnerability 0.4%
- CVE-2025-31025 WordPress Image Hover Effects Block plugin <= 1.4.5 - Cross Site Scripting (XSS) Vulnerability 0.3%
- CVE-2025-31539 WordPress Cryptocurrency Widgets Pack plugin <= 2.0.1 - Broken Access Control vulnerability 0.4%
- CVE-2024-4780 Image Hover Effects – Elementor Addon <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via eihe_link Parameter 0.5%
- CVE-2024-1166 Image Hover Effects - Elementor Addon <= 1.4.1 - Authenticated(Contributor+) DOM-based Stored Cross-Site Scripting via Image Hover Effects Widget 0.3%
- CVE-2024-29936 WordPress Image Hover Effects – Elementor Addon plugin <= 1.4 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2022-44588 WordPress Cryptocurrency Widgets Pack Plugin <=1.8.1 is vulnerable to SQL Injection 2.4%