{"id":18708279,"date":"2025-11-05T17:58:24","date_gmt":"2025-11-05T17:58:24","guid":{"rendered":"https:\/\/wordpress.org\/support\/?post_type=topic&#038;p=18708279"},"modified":"2025-11-05T19:09:42","modified_gmt":"2025-11-05T19:09:42","slug":"vulnerability-in-current-release","status":"publish","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/vulnerability-in-current-release\/","title":{"rendered":"Vulnerability in current release"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Wordfence scan:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Critical Problems:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">* The Plugin &#8220;Image Hover Effects Block&#8221; has a security vulnerability.<br \/>Vulnerability Severity: 6.4\/10.0 (Medium)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Image Hover Effects Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.<\/p>\n","protected":false},"template":"","class_list":["post-18708279","topic","type-topic","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/18708279","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":1,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/18708279\/revisions"}],"predecessor-version":[{"id":18708376,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/18708279\/revisions\/18708376"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=18708279"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}