oxilab vulnerabilities

5 published CVEs name oxilab among the affected products.

Critical 1High 0Medium 4Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-109973
Flipbox <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'flip-box-image-upload-url-01-alt' Parameter
oxilab · Flipbox – Awesomes Flip Boxes Image Overlay
Medium6.4
CVE-2026-118056
Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) <= 9.12.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'oxi_image_comparison_before_text' Parameter
oxilab · Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier )
Medium4.9
CVE-2024-13362
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
sebet · Go Fetch Jobs (for WP Job Manager)
Medium6.1
CVE-2025-5092
Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library
lightgalleryteam · LightGallery WP
Medium6.4
CVE-2021-36888
WordPress Image Hover Effects Ultimate plugin <= 9.6.1 - Unauthenticated Arbitrary Options Update leading to full website compromise
Oxilab · Image Hover Effects Ultimate (WordPress plugin)
Critical9.8