CVE-2022-29447

MEDIUM

Wow-Company's Hover Effects <2.1 - LFI

Title source: llm

Authenticated (administrator or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company's Hover Effects plugin <= 2.1 at WordPress.

Core 2

Core References

Product, Release Notes x_refsource_confirm

Release Notes, Third Party Advisory x_refsource_confirm

CVSS v3 6.8

EPSS 0.0098

EPSS Percentile 57.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

CWE

CWE-552

Status published

Products (2)

Wow-Company/Hover Effects – easily create any hover effect (WordPress plugin) <= 2.1 - 2.1

wow-company/hover_effects < 2.1

Published May 20, 2022

Tracked Since Feb 18, 2026