Image Hover Effects Vulnerabilities

The Image Hover Effects plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.5. This is due to missing or incorrect nonce validation on the save_caption_options() function. This makes it possible for unauthenticated attackers to modify the caption options via a forged req...

CVSS:

4.3

Affected:

up to 5.5

Fixed in:

5.6

Disclosed:

Nov 7, 2023

CVE-2023-47552 on NVD →

The Image Hover Effects plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters on the settings page in versions up to, and including, 5.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions...

CVSS:

5.5

Affected:

up to 5.4

Fixed in:

5.5

Disclosed:

Nov 20, 2022

CVE-2022-4010 on NVD →