Cross-site Scripting Vulnerability in Ultimate Image Hover Effects by Themebon

CVE-2025-22585

What is CVE-2025-22585?

A Cross-site Scripting (XSS) vulnerability exists in the Ultimate Image Hover Effects plugin developed by Themebon. This issue allows attackers to inject malicious scripts into web pages, which can be executed in the context of users visiting the affected site. The vulnerability affects versions from n/a up to and including 1.1.2, potentially compromising user data and allowing for unauthorized actions. Users are advised to update the plugin to mitigate risks associated with this security flaw.

References