Extension WordPress
Vulnérabilités Image Hover Effects – Elementor Addon
Cette page rassemble les failles publiées pour Image Hover Effects – Elementor Addon, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Image Hover Effects – Elementor Addon
5 fiches
Image Hover Effects – Elementor Addon <= 1.4.4 – Missing Authorization
The Image Hover Effects – Elementor Addon plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 1.4.4. This makes it possible for authenticated attackers,…
*-1.4.4
Non indiqué
22/09/2025
Image Hover Effects – Elementor Addon <= 1.4.3 – Authenticated (Contributor+) Stored Cross-Site Scripting via eihe_link Parameter
The Image Hover Effects – Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘eihe_link’ parameter in all versions up to, and including, 1.4.3 due to insufficient input sanitization and output escaping. This makes…
*-1.4.3
1.4.4
15/07/2024
Image Hover Effects – Elementor Addon <= 1.4.1 – Authenticated(Contributor+) DOM-based Stored Cross-Site Scripting via Image Hover Effects Widget
The Image Hover Effects – Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Hover Effects Widget in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output…
*-1.4.1
1.4.2
06/05/2024
Image Hover Effects – Elementor Addon <= 1.4 – Authenticated (Contributor+) Stored Cross-Site Scripting via 'eihe_align'
The Image Hover Effects – Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eihe_align' parameter in versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it…
*-1.4
1.4.1
25/03/2024
Image Hover Effects – Elementor Addon <= 1.3.3 – Authenticated Stored Cross-Site Scripting
The “Image Hover Effects – Elementor Addon” WordPress Plugin before 1.3.4 has a widget that is vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.
[*, 1.3.4)
1.3.4
13/04/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.