← Database

CVE-2021-36888

CRITICAL CVSS: 9.8 Published: 2021-12-15 Modified: 2026-06-17

Description

Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate (versions <= 9.6.1) WordPress plugin.

Affected Platforms

Blocksera Image Hover Effects

Weakness Type

CWE-284, CWE-306

References