9.8 Critical

CVE-2021-36888 Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover…

Description

Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate (versions <= 9.6.1) WordPress plugin.

Affected products and versions

Product	Affected versions	Fixed in
Image Hover Effects Ultimate (WordPress plugin) 9.6	earliest → 9.6.1	No fix stated

Do you use Image Hover Effects Ultimate (WordPress plugin)?

Track this CVE Watch Image Hover Effects Ultimate (WordPress plugin) Check my SBOMs

www.cveye.io/en/cve/CVE-2021-36888

Timeline

Published December 15, 2021
Last modified April 28, 2026

References

wordpress.org wordpress.org
patchstack.com patchstack.com

Track this CVE