Skip to content
Oxilab vulnerabilities
Newest
-
oxilab flipbox – awesomes flip boxes image overlay
Flipbox <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'flip-box-image-upload-url-01-alt' Parameter
CVE-2026-109973
6.4 Medium
-
oxilab image hover effects ultimate ( image gallery, effects, lightbox, comparison & magnifier )
Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) <= 9.12.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'oxi_image_comparison_before_text' Par…
CVE-2026-118056
4.9 Medium
-
100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 more
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
CVE-2024-13362
6.1 Medium
-
famethemes onepress, galaxyweblinks gallery with thumbnail slider, lightgalleryteam lightgallery wp +5 more +7 more
Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library
CVE-2025-5092
6.4 Medium
-
billy bryant tabs, oxilab responsive tabs +1 more
WordPress Tabs plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2024-37120
5.9 Medium
-
biplob018 shortcode addons
WordPress Shortcode Addons plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability
CVE-2024-37121
5.9 Medium
-
biplob adhikari accordions
WordPress Accordions plugin <= 2.3.5 - Cross Site Scripting (XSS) vulnerability
CVE-2024-37122
5.9 Medium
-
biplob018 image hover effects - caption hover with carousel, oxilab image hover effects for elementor with lightbox and flipbox +1 more
WordPress Image Hover Effects for Elementor with Lightbox and Flipbox plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability
CVE-2024-37546
6.5 Medium
-
biplob018 image hover effects for elementor with lightbox and flipbox
Image Hover Effects for Elementor with Lightbox and Flipbox <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id, oxi_addons_f_title_tag, and content_description_tag Parameters
CVE-2024-5001
6.4 Medium
-
biplob018 shortcode addons
WordPress Shortcode Addons <= 3.2.5 - Arbitrary File Upload vulnerability
CVE-2024-31114
Public exploit
9.1 Critical
-
biplob adhikari accordion – multiple accordion or faqs builder, oxilab accordions +1 more
WordPress Accordions Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-25962
5.9 Medium
-
biplob018 image hover effects for elementor with lightbox and flipbox
WordPress Image Hover Effects - Caption Hover with Carousel Plugin <= 2.8 is vulnerable to Cross Site Scripting (XSS)
CVE-2022-45831
7.1 High
-
oxilab image hover effects ultimate, biplob018 image hover effects ultimate (image gallery, effects, lightbox, comparison or magnifier) +1 more
The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2022-4207
5.5 Medium
-
oxilab image hover effects ultimate, biplob adhikari image hover effects ultimate (wordpress plugin) +1 more
WordPress Image Hover Effects Ultimate plugin <= 9.7.1 - Auth. WordPress Options Change vulnerability
CVE-2022-42459
7.2 High
-
oxilab accordions, biplob adhikari accordions – multiple accordions or faqs builder (wordpress plugin) +1 more
WordPress Accordions plugin <= 2.0.3 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities
CVE-2022-45082
3.4 Low
-
oxilab accordions, biplob adhikari accordions – multiple accordions or faqs builder (wordpress plugin) +1 more
WordPress Accordions plugin <= 2.0.3 - Auth. WordPress Options Change vulnerability
CVE-2022-38104
7.2 High
-
biplob018 image hover effects ultimate
Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Title & Description
CVE-2022-2937
6.4 Medium
-
oxilab image hover effects ultimate, biplob018 image hover effects ultimate (image gallery, effects, lightbox, comparison or magnifier) +1 more
Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Media URL
CVE-2022-2935
6.4 Medium
-
oxilab image hover effects ultimate, biplob018 image hover effects ultimate (image gallery, effects, lightbox, comparison or magnifier) +1 more
Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Video Link
CVE-2022-2936
6.4 Medium
-
oxilab shortcode addons, biplob018 shortcode addons (wordpress plugin) +1 more
WordPress Shortcode Addons plugin <= 3.1.2 - Authenticated WordPress Options Change vulnerability
CVE-2022-33970
7.2 High
-
biplob adhikari tabs (wordpress plugin), oxilab responsive tabs +1 more
WordPress Tabs plugin <= 3.6.0 - Authenticated WordPress Options Change vulnerability
CVE-2022-36375
7.2 High
-
oxilab flipbox, biplob adhikari flipbox (wordpress plugin) +1 more
WordPress Flipbox plugin <= 2.6.0 - Authenticated WordPress Options Change vulnerability
CVE-2022-33969
7.2 High
-
oxilab shortcode addons, biplob018 shortcode addons (wordpress plugin) +1 more
WordPress Shortcode Addons plugin <= 3.0.2 - Unauthenticated Arbitrary Option Update vulnerability
CVE-2022-34487
9.8 Critical
-
oxilab accordions, biplob adhikari accordions (wordpress plugin) +1 more
WordPress Accordions plugin <= 2.0.2 - Unauthenticated WordPress Options Change vulnerability
CVE-2022-33198
9.8 Critical
-
oxilab image hover effects ultimate, biplob adhikari image hover effects ultimate (wordpress plugin) +1 more
WordPress Image Hover Effects Ultimate plugin <= 9.7.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
CVE-2022-29424
4.8 Medium
-
biplob018 image hover effects ultimate (image gallery, effects, lightbox, comparison or magnifier), oxilab image hover effects ultimate +1 more
Image Hover Effects Ultimate < 9.7.1 - Reflected Cross-Site Scripting
CVE-2021-25031
6.1 Medium
-
blocksera image hover effects, biplob adhikari image hover effects ultimate (wordpress plugin) +1 more
WordPress Image Hover Effects Ultimate plugin <= 9.6.1 - Unauthenticated Arbitrary Options Update leading to full website compromise
CVE-2021-36888
9.8 Critical