WordPress Image Hover Effects for Elementor plugin <= 1.0.2.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Upload vulnerability

🗓️ 04 Nov 2025 12:38:00Reported by theviper17yType

patchstack

patchstack🔗 patchstack.com👁 4 Views

WordPress Image Hover Effects for Elementor plugin <=1.0.2.3 has broken access control; fixed 1.0.2.4.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2025-10896	4 Nov 202507:42	–	circl
CNNVD	WordPress plugin多款产品安全漏洞	4 Nov 202500:00	–	cnnvd
CVE	CVE-2025-10896	4 Nov 202504:27	–	cve
Cvelist	CVE-2025-10896 Multiple Plugins <= Multiple Versions - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Upload	4 Nov 202504:27	–	cvelist
EUVD	EUVD-2025-37604	4 Nov 202504:27	–	euvd
NVD	CVE-2025-10896	4 Nov 202505:15	–	nvd
Patchstack	WordPress Master Blocks plugin <= 1.4.1.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary plugin Upload vulnerability	4 Nov 202512:39	–	patchstack
Patchstack	WordPress Image Comparison Addon for Elementor plugin <= 1.0.2.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary plugin Upload vulnerability	4 Nov 202512:36	–	patchstack
Patchstack	WordPress Content Locker for Elementor plugin <= 1.0.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary plugin Upload vulnerability	4 Nov 202508:35	–	patchstack
Positive Technologies	PT-2025-44934	4 Nov 202500:00	–	ptsecurity

Vulners

Node

wordpress image_hover_effects_for_elementorRange≤1.0.2.3

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/detail/multiple-plugins-multiple-versions-missing-authorization-to-authenticated-subscriber-arbitrary-plugin-upload

04 Nov 2025 12:38Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.18.8

EPSS0.00517

SSVC

WordPress plugin Image hover effects Elementor Broken access control Vulnerability Fixed 1.0.2.4