Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2021-36888

WordPress Image Hover Effects Ultimate plugin <= 9.6.1 - Unauthenticated Arbitrary Options Update leading to full website compromise

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Patchstack

Description

Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate (versions <= 9.6.1) WordPress plugin.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Oxilab Image Hover Effects Ultimate (WordPress plugin)

  • <= 9.6.1 to ≤ 9.6.1affected

References