WordPress Image Hover Effects for Elementor with Lightbox and Flipbox plugin <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id, oxi_addons_f_title_tag, and content_description_tag Parameters vulnerability

🗓️ 02 Feb 2026 08:52:00Reported by stealthcopterType

Authenticated stored cross site scripting in WordPress Image Hover Effects up to 3.0.2 via _id and content description tag.

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress plugin Image Hover Effects for Elementor with Lightbox and Flipbox security vulnerability	6 Jun 202400:00	–	cnnvd
CVE	CVE-2024-5001	6 Jun 202402:02	–	cve
Cvelist	CVE-2024-5001 Image Hover Effects for Elementor with Lightbox and Flipbox <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id, oxi_addons_f_title_tag, and content_description_tag Parameters	6 Jun 202402:02	–	cvelist
EUVD	EUVD-2024-46276	3 Oct 202520:07	–	euvd
NVD	CVE-2024-5001	6 Jun 202402:15	–	nvd
Positive Technologies	PT-2024-33849 · WordPress · Image Hover Effects For Elementor With Lightbox/Flipbox	5 Jun 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-5001	23 May 202509:17	–	redhatcve
Vulnrichment	CVE-2024-5001 Image Hover Effects for Elementor with Lightbox and Flipbox <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id, oxi_addons_f_title_tag, and content_description_tag Parameters	6 Jun 202402:02	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 3, 2024 to June 9, 2024)	13 Jun 202415:35	–	wordfence
WPVulnDB	Image Hover Effects for Elementor with Lightbox and Flipbox <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id, oxi_addons_f_title_tag, and content_description_tag Parameters	5 Jun 202400:00	–	wpvulndb

Vulners

Node

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/image-hover-effects-with-carousel/image-hover-effects-for-elementor-with-lightbox-and-flipbox-302-authenticated-contributor-stored-cross-site-scripting-via-id-oxi-addons-f-title-tag-and-content-description-tag-parameters

02 Feb 2026 08:52Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.4 - 6.4

EPSS0.00225

SSVC