CVE-2023-47552

CVE-2023-47552: CSRF vulnerability in Image Hover Effects – WordPress Plugin (affected versions up to 5.5). Root cause per sources: lack of proper CSRF protection; patch released in 5.6. Severity/impact vary by source (NVD lists high/8.8 CVSS; Patchstack/Wordfence show medium to low depending on ...

CVE-2022-4010

The CVE-2022-4010 entry affects the Image Hover Effects WordPress plugin (versions prior to 5.5). The issue is that the plugin does not sanitize and escape certain settings, enabling Stored Cross-Site Scripting by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (includ...