← Back to browse · API

CVE-2021-36888

Severity
CRITICAL
CVSS
9.8
EPSS
0.0674
Risk score
41.56
CISA KEV
No
PoC
No
Published
2021-12-15
Modified
2026-04-28
First seen
2026-08-07
Aliases
EUVD-2021-23464, GHSA-8FJW-GV37-439Q
Products
Biplob Adhikari:Image Hover Effects Ultimate (WordPress plugin) ≤ 9.6.1 ≤9.6.1
Sources
euvd EUVD-2021-23464

Description

Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate (versions <= 9.6.1) WordPress plugin.

References