WordPress plugin
Ultimate Image Hover Effects security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All Ultimate Image Hover Effects vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.1.2No patch available | CVE-2025-22585 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.1.2No patch available
Ultimate Image Hover Effects: common questions
Does Ultimate Image Hover Effects have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Ultimate Image Hover Effects: 1 medium. At least one is not fixed in the latest version.
How do I check which version of Ultimate Image Hover Effects I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Ultimate Image Hover Effects vulnerability?
CVE-2025-22585, published Jan 7, 2025: Ultimate Image Hover Effects <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any Ultimate Image Hover Effects vulnerability listed in CISA KEV?
No. None of the known Ultimate Image Hover Effects vulnerabilities is currently listed in the CISA KEV catalog.