Skip to content
OpenAdvisories
Medium · 6.8 CVE-2022-29447 EUVD-2022-33785GHSA-56qr-6hfh-52cg

WordPress Hover Effects plugin <= 2.1 - Authenticated Local File Inclusion (LFI) vulnerability

Published May 20, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Wow-Company Product: Hover Effects – easily create any hover effect (WordPress plugin) Category: Web / CMS

Description

Authenticated (administrator or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company's Hover Effects plugin <= 2.1 at WordPress.

Affected products

VendorProductAffectedFixed
Wow-Company Hover Effects – easily create any hover effect (WordPress plugin) <= 2.1 – ≤ 2.1 —

References