Lucene search
John Castro (Pagely)PATCHSTACK:6E269873772CF676B9C55F0B1F8E726AHistoryDec 15, 2021 - 12:00 a.m.
WordPress Image Hover Effects Ultimate plugin <= 9.6.1 - Unauthenticated Arbitrary Options Update leading to full website compromise
2021-12-1500:00:00
John Castro (Pagely)
patchstack.com
6
wordpress
image hover effects
unauthenticated
options update
vulnerability
compromise
EPSS
0.002
Percentile
65.1%
Unauthenticated Arbitrary Options Update leading to full website compromise discovered by mirphak aka John Castro (Pagely) in WordPress Image Hover Effects Ultimate plugin (versions <= 9.6.1).
Solution
Update the WordPress Image Hover Effects Ultimate plugin to the latest available version (at least 9.6.2)
Related
cve
cve
CVE-2021-36888
2021-12-15 19:15:14
nvd
nvd
CVE-2021-36888
2021-12-15 19:15:14
cvelist
cvelist
prion
prion
Code injection
2021-12-15 19:15:00
wpvulndb
wpvulndb
cnvd
cnvd
WordPress Image Hover Effects Ultimate has an unspecified vulnerability
2021-12-17 00:00:00
wpexploit
wpexploit