WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier )

Add stunning image hover effects to WordPress. 500+ CSS3 animations, 10 effect modules. Native Elementor widget, Gutenberg block & WPBakery widget.

8Reported vulnerabilities
9.8Highest CVSS score
9.11.7Latest version
20,000+Active installs

What to do now

Update Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) to 9.8.5 or later. 8 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 4, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2021-36888 Critical 9.8 6.7% Before 9.6.1 9.6.1 December 15, 2021
CVE-2021-25031 Medium 6.1 0.9% Before 9.7.1 9.7.1 January 24, 2022
CVE-2022-42459 High 7.2 0.8% 9.7.1 and earlier 9.7.2 November 18, 2022
CVE-2022-4207 Medium 5.5 0.5% 9.8.1 to 9.8.4 (inclusive) 9.8.5 December 11, 2022
CVE-2022-2937 Medium 5.4 0.5% Before 9.8.0 9.8.0 September 23, 2022
CVE-2022-2936 Medium 5.4 0.6% 9.7.3 and earlier 9.8.0 September 6, 2022
CVE-2022-2935 Medium 5.4 0.6% 9.7.3 and earlier 9.8.0 September 6, 2022
CVE-2022-29424 Medium 4.8 0.5% 9.7.1 and earlier 9.7.2 May 20, 2022

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.