Oxilab
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) | 1 | – | Nov 20, 2025 |
| Image Hover Effects Ultimate (WordPress plugin) | 1 | – | Dec 15, 2021 |
| Product Layouts for WooCommerce | 1 | – | May 1, 2026 |
Exploited and recent CVEs
- CVE-2024-13362 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
- CVE-2025-5092 Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library 0.3%
- CVE-2021-36888 WordPress Image Hover Effects Ultimate plugin <= 9.6.1 - Unauthenticated Arbitrary Options Update leading to full website compromise 6.5%