Skip to content
OpenAdvisories

Vendor

biplob018

12 known vulnerabilities.

biplob018 at a glance

Last 12 months
0
Critical · all time
2
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) 3 Image Hover Effects for Elementor with Lightbox and Flipbox 2 Shortcode Addons 2 Shortcode Addons (WordPress plugin) 2 Team Showcase and Slider – Team Members Builder 1 Image Hover Effects Ultimate 1 Image Hover Effects - Caption Hover with Carousel 1
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • High 7.1
    CVE-2024-51763

    WordPress Team Showcase and Slider plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in biplob018 Team Showcase and Slider – Team Members Builder team-showcase-ultimate allows Reflected XSS.This issue affects Team Showcase and Slider – Team Memb…

    biplob018 Team Showcase and Slider – Team Members Builder
  • Medium 5.9
    CVE-2024-37121

    WordPress Shortcode Addons plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in biplob018 Shortcode Addons allows Stored XSS.This issue affects Shortcode Addons: from n/a through 3.2.5.

    biplob018 Shortcode Addons
  • Medium 6.5
    CVE-2024-37546

    WordPress Image Hover Effects for Elementor with Lightbox and Flipbox plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in biplob018 Image Hover Effects - Caption Hover with Carousel allows Stored XSS.This issue affects Image Hover Effects - Caption Hover with Carousel: fr…

    biplob018 Image Hover Effects - Caption Hover with Carousel
  • Medium 6.4
    CVE-2024-5001

    Image Hover Effects for Elementor with Lightbox and Flipbox <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id, oxi_addons_f_title_tag, and content_description_tag Parameters

    The Image Hover Effects for Elementor with Lightbox and Flipbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_id', 'oxi_addons_f_title_tag', and 'content_description_tag' parameters in all versions up to, and including, 3.0.2 due…

    biplob018 Image Hover Effects for Elementor with Lightbox and Flipbox Web / CMS
  • Critical 9.1
    CVE-2024-31114 Public exploit

    WordPress Shortcode Addons <= 3.2.5 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in biplob018 Shortcode Addons.This issue affects Shortcode Addons: from n/a through 3.2.5.

    biplob018 Shortcode Addons
  • High 7.1
    CVE-2022-45831

    WordPress Image Hover Effects - Caption Hover with Carousel Plugin <= 2.8 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in biplob018 Image Hover Effects for Elementor with Lightbox and Flipbox plugin <= 2.8 versions.

    biplob018 Image Hover Effects for Elementor with Lightbox and Flipbox
  • Medium 5.5
    CVE-2022-4207

    The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several values t…

    biplob018 Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) Web / CMS
  • Medium 6.4
    CVE-2022-2937

    Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Title & Description

    The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Title & Description values that can be added to an Image Hover in versions up to, and including, 9.7.3 due to insufficient input sanitization and output…

    biplob018 Image Hover Effects Ultimate Web / CMS
  • Medium 6.4
    CVE-2022-2935

    Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Media URL

    The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Media Image URL value that can be added to an Image Hover in versions up to, and including, 9.7.3 due to insufficient input sanitization and output esca…

    biplob018 Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) Web / CMS
  • Medium 6.4
    CVE-2022-2936

    Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Video Link

    The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Video Link values that can be added to an Image Hover in versions up to, and including, 9.7.3 due to insufficient input sanitization and output escaping. Th…

    biplob018 Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) Web / CMS
  • High 7.2
    CVE-2022-33970

    WordPress Shortcode Addons plugin <= 3.1.2 - Authenticated WordPress Options Change vulnerability

    Authenticated WordPress Options Change vulnerability in Biplob018 Shortcode Addons plugin <= 3.1.2 at WordPress.

    biplob018 Shortcode Addons (WordPress plugin) Web / CMS
  • Critical 9.8
    CVE-2022-34487 Scanner template

    WordPress Shortcode Addons plugin <= 3.0.2 - Unauthenticated Arbitrary Option Update vulnerability

    Unauthenticated Arbitrary Option Update vulnerability in biplob018's Shortcode Addons plugin <= 3.0.2 at WordPress.

    biplob018 Shortcode Addons (WordPress plugin) Web / CMS