Lucene search
+L

553 matches found

Positive Technologies
Positive Technologies
added 2025/06/27 12:0 a.m.10 views

PT-2025-27165 · Wow Company · Hover Effects

Name of the Vulnerable Software and Affected Versions: Wow-Company Hover Effects versions n/a through 2.1.2 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

7.6CVSS7.8AI score0.00355EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.5 views

WordPress plugin Hover Effects SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

7.6CVSS7.7AI score0.00355EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/06/08 1:18 p.m.9 views

CVE-2025-31025

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Blocksera Image Hover Effects Block image-hover-effects-block allows Stored XSS.This issue affects Image Hover Effects Block: from n/a through = 1.4.5...

6.5CVSS5.9AI score0.00215EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/06 1:15 p.m.8 views

CVE-2025-31025

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Blocksera Image Hover Effects Block image-hover-effects-block allows Stored XSS.This issue affects Image Hover Effects Block: from n/a through = 1.4.5...

6.5CVSS0.00215EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/06/06 12:53 p.m.5 views

CVE-2025-31025 WordPress Image Hover Effects Block plugin <= 1.4.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Blocksera Image Hover Effects Block image-hover-effects-block allows Stored XSS.This issue affects Image Hover Effects Block: from n/a through = 1.4.5...

6.5CVSS5.8AI score0.00215EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/06 12:53 p.m.43 views

CVE-2025-31025

CVE-2025-31025 refers to a Stored XSS in the WordPress plugin “Image Hover Effects Block.” The connected Wordfence vulnerability listing confirms: affected software is Image Hover Effects Block, vulnerable version

6.5CVSS5.9AI score0.00215EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/06/06 12:53 p.m.17 views

CVE-2025-31025 WordPress Image Hover Effects Block plugin <= 1.4.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Blocksera Image Hover Effects Block image-hover-effects-block allows Stored XSS.This issue affects Image Hover Effects Block: from n/a through = 1.4.5...

6.5CVSS0.00215EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/06 12:0 a.m.5 views

WordPress plugin Image Hover Effects Block 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS5.9AI score0.00215EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/06/06 12:0 a.m.7 views

PT-2025-24196 · Blocksera · Blocksera Image Hover Effects Block

Name of the Vulnerable Software and Affected Versions: Blocksera Image Hover Effects Block versions 1.4.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

6.5CVSS6.2AI score0.00215EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/06/05 1:17 a.m.11 views

WordPress Image Hover Effects Block plugin <= 1.4.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by zaim in WordPress Plugin Image Hover Effects Block versions = 1.4.5...

6.5CVSS6AI score0.00215EPSS
SaveExploits0Affected Software1
Amazon
Amazon
added 2025/05/29 12:0 a.m.7 views

Important: thunderbird

Issue Overview: Through a series of popup and window.print calls, an attacker can cause a window to go fullscreen without the user seeing the notification prompt, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox ESR 102.5, Thunderbird 102.5, and Firefo...

9.1CVSS8.7AI score0.0061EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 11:43 a.m.9 views

CVE-2025-22585

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themebon Ultimate Image Hover Effects ultimate-image-hover-effects allows DOM-Based XSS.This issue affects Ultimate Image Hover Effects: from n/a through = 1.1.2...

6.5CVSS7.2AI score0.00209EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:17 a.m.5 views

CVE-2024-5001

The Image Hover Effects for Elementor with Lightbox and Flipbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id', 'oxiaddonsftitletag', and 'contentdescriptiontag' parameters in all versions up to, and including, 3.0.2 due to insufficient input sanitization and outpu...

6.4CVSS6AI score0.00321EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:56 a.m.18 views

CVE-2024-29936

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Blocksera Image Hover Effects – Elementor Addon allows Stored XSS.This issue affects Image Hover Effects – Elementor Addon: from n/a through 1.4...

6.5CVSS8.6AI score0.00339EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:39 a.m.9 views

CVE-2024-1166

The Image Hover Effects – Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Hover Effects Widget in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS5AI score0.00328EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:2 a.m.8 views

CVE-2024-4780

The Image Hover Effects – Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘eihelink’ parameter in all versions up to, and including, 1.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS5.8AI score0.00457EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:43 a.m.11 views

CVE-2024-37546

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in biplob018 Image Hover Effects - Caption Hover with Carousel allows Stored XSS.This issue affects Image Hover Effects - Caption Hover with Carousel: from n/a through 3.0.2...

6.5CVSS6.8AI score0.00237EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 6:40 a.m.16 views

CVE-2024-50552

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jasonpancake Hover Video Preview hover-video-preview allows Stored XSS.This issue affects Hover Video Preview: from n/a through = 1.0.2...

6.5CVSS5.9AI score0.00341EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:33 a.m.9 views

CVE-2024-38741

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Noor-E-Alam Amazing Hover Effects allows Stored XSS.This issue affects Amazing Hover Effects: from n/a through 2.4.9...

6.5CVSS6.8AI score0.0026EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:15 a.m.9 views

CVE-2023-47552

Cross-Site Request Forgery CSRF vulnerability in Labib Ahmed Image Hover Effects – WordPress Plugin.This issue affects Image Hover Effects – WordPress Plugin: from n/a through 5.5...

8.8CVSS8AI score0.0028EPSS
SaveExploits0References1
Rows per page
Query Builder