Hover Effects – easily create any hover effect Security & Risk Analysis

The static analysis of "hover-effects" v2.1.3 shows a strong adherence to secure coding practices, with no identified attack surface, dangerous functions, or issues with SQL queries, output escaping, file operations, or external HTTP requests. Taint analysis also reveals no critical or high severity issues. This indicates the current version is well-sanitized from many common web vulnerabilities.

However, the plugin's vulnerability history presents a significant concern. It has a history of two medium severity vulnerabilities: SQL Injection and PHP Remote File Inclusion. While there are currently no unpatched CVEs, the existence of these past vulnerabilities, particularly those related to injection and file inclusion, suggests a recurring pattern of potential security weaknesses in the plugin's development. The most recent vulnerability was reported on June 27, 2025, which is quite recent and implies that developers may have struggled to fully eradicate these types of flaws.

In conclusion, while the current code analysis is reassuring, the plugin's past vulnerability landscape warrants caution. Users should be aware of the potential for similar issues to resurface, and developers should continue to focus on robust input validation and secure coding practices, particularly around handling user-supplied data and file operations, to prevent a recurrence of past vulnerabilities.