oxilab Vulnerabilities and Affected Products
Vulnerabilities associated with Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ).
Products
Clear product- accordions1 vulnerability
- Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier )1 vulnerability
- Image Hover Effects Ultimate (WordPress plugin)1 vulnerability
- Product Layouts for WooCommerce1 vulnerability
- Shortcode Addons Plugin1 vulnerability
- shortcode_addons1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-5092MEDIUM | Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript LibraryMultiple plugins and/or themes for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled lightGallery library (<= 2.8.3) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. CWE-79Nov 20, 2025 | CVSS6.4v3.1 | EPSS0.233% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |