WordPress plugin

Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) security & vulnerabilities

Q: Is any Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) vulnerability listed in CISA KEV?

No. None of the known Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) vulnerabilities is currently listed in the CISA KEV catalog.

image-hover-effects-ultimate— active installsLast vulnerability Nov 6, 2026

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

Watch plugin

10Known vulnerabilities

Critical1
High1
Medium8
Low0

Vulnerabilities per year

All Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) vulnerabilities

Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) vulnerabilities
Severity	Vulnerability	CVE	Published
Medium4.9	Authenticated (Subscriber+) Stored Cross-Site Scripting via 'oxi_image_comparison_before_text' Parameter ≤9.12.2Update to 9.12.3	CVE-2026-118056	Nov 06
Medium6.4	Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library ≤1.7.1031Update to 1.7.1032	CVE-2025-5092	Nov 19, 2025
Medium5.5	9.8.4 - Authenticated (Admin+) Stored Cross-Site Scripting 9.8.1 – 9.8.4Update to 9.8.5	CVE-2022-4207	Dec 11, 2022
High7.2	Authenticated (Admin+) Arbitrary Options Update ≤9.7.1Update to 9.7.2	CVE-2022-42459	Oct 25, 2022
Medium6.4	Authenticated Stored Cross-Site Scripting via Media URL ≤9.7.3Update to 9.8.0	CVE-2022-2935	Aug 31, 2022
Medium6.4	Authenticated Stored Cross-Site Scripting via Title & Description ≤9.7.3Update to 9.8.0	CVE-2022-2937	Aug 31, 2022
Medium6.4	Authenticated Stored Cross-Site Scripting via Video Link ≤9.7.3Update to 9.8.0	CVE-2022-2936	Aug 31, 2022
Medium6.1	Reflected Cross-Site Scripting ≤9.7.1Update to 9.7.2	CVE-2022-29424	May 4, 2022
Medium6.1	Reflected Cross-Site Scripting via effects ≤9.7.0Update to 9.7.1	CVE-2021-25031	Dec 27, 2021
Critical9.8	Unauthenticated Arbitrary Options Update ≤9.6.1Update to 9.6.2	CVE-2021-36888	Dec 15, 2021

Medium4.9
Authenticated (Subscriber+) Stored Cross-Site Scripting via 'oxi_image_comparison_before_text' Parameter
≤9.12.2Update to 9.12.3
CVE-2026-118056Nov 06
Medium6.4
Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library
≤1.7.1031Update to 1.7.1032
CVE-2025-5092Nov 19, 2025
Medium5.5
9.8.4 - Authenticated (Admin+) Stored Cross-Site Scripting
9.8.1 – 9.8.4Update to 9.8.5
CVE-2022-4207Dec 11, 2022
High7.2
Authenticated (Admin+) Arbitrary Options Update
≤9.7.1Update to 9.7.2
CVE-2022-42459Oct 25, 2022
Medium6.4
Authenticated Stored Cross-Site Scripting via Media URL
≤9.7.3Update to 9.8.0
CVE-2022-2935Aug 31, 2022
Medium6.4
Authenticated Stored Cross-Site Scripting via Title & Description
≤9.7.3Update to 9.8.0
CVE-2022-2937Aug 31, 2022
Medium6.4
Authenticated Stored Cross-Site Scripting via Video Link
≤9.7.3Update to 9.8.0
CVE-2022-2936Aug 31, 2022
Medium6.1
Reflected Cross-Site Scripting
≤9.7.1Update to 9.7.2
CVE-2022-29424May 4, 2022
Medium6.1
Reflected Cross-Site Scripting via effects
≤9.7.0Update to 9.7.1
CVE-2021-25031Dec 27, 2021
Critical9.8
Unauthenticated Arbitrary Options Update
≤9.6.1Update to 9.6.2
CVE-2021-36888Dec 15, 2021

Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ): common questions

Does Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) have known vulnerabilities?

Yes. VulnCrest Radar lists 10 known vulnerabilities in Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ): 1 critical, 1 high, 8 medium. At least one is not fixed in the latest version.

How do I check which version of Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) vulnerability?

CVE-2026-118056, published Nov 6, 2026: Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) <= 9.12.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'oxi_image_comparison_before_text' Parameter. Severity: Medium (CVSS 4.9).

Is any Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) vulnerability listed in CISA KEV?

No. None of the known Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) vulnerabilities is currently listed in the CISA KEV catalog.