Vulnerabilities > Oxilab > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-07-21 CVE-2022-34487 Unspecified vulnerability in Oxilab Shortcode Addons
Unauthenticated Arbitrary Option Update vulnerability in biplob018's Shortcode Addons plugin <= 3.0.2 at WordPress.
network
low complexity
oxilab
5.3
2022-01-24 CVE-2021-25031 Cross-site Scripting vulnerability in Oxilab Image Hover Effects Ultimate
The Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) WordPress plugin before 9.7.1 does not escape the effects parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting
network
oxilab CWE-79
4.3