Blocksera vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20243
3. 20253

Newest CVEs

• CVE-2025-57939

  WordPress Image Hover Effects – Elementor Addon Plugin <= 1.4.4 - Broken Access Control Vulnerability

  Blocksera · Image Hover Effects – Elementor Addon

  Medium5.3
• CVE-2025-31025

  WordPress Image Hover Effects Block plugin <= 1.4.5 - Cross Site Scripting (XSS) Vulnerability

  Blocksera · Image Hover Effects Block

  Medium6.5
• CVE-2025-31539

  WordPress Cryptocurrency Widgets Pack plugin <= 2.0.1 - Broken Access Control vulnerability

  Blocksera · Cryptocurrency Widgets Pack

  Medium6.5
• CVE-2024-4780

  Image Hover Effects – Elementor Addon <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via eihe_link Parameter

  blocksera · Image Hover Effects – Elementor Addon

  Medium6.4
• CVE-2024-1166

  Image Hover Effects - Elementor Addon <= 1.4.1 - Authenticated(Contributor+) DOM-based Stored Cross-Site Scripting via Image Hover Effects Widget

  blocksera · Image Hover Effects – Elementor Addon

  Medium6.4
• CVE-2024-29936

  WordPress Image Hover Effects – Elementor Addon plugin <= 1.4 - Cross Site Scripting (XSS) vulnerability

  Blocksera · Image Hover Effects – Elementor Addon

  Medium6.5
• CVE-2022-44588

  WordPress Cryptocurrency Widgets Pack Plugin <=1.8.1 is vulnerable to SQL Injection

  Blocksera · Cryptocurrency Widgets Pack

  Critical9.9