Before After Image Comparison – Visual Comparison for Two Images <= 1.1.21 - Unauthenticated Stored Cross-Site Scripting
high
The Before After Image Comparison – Visual Comparison for Two Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.1.21. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...
- CVSS:
- 7.2
(Wordfence)
- Affected:
- up to 1.1.21
- Fix:
- No patched version reported
- Disclosed:
- Oct 9, 2026
CVE-2026-62034 on NVD →
Before After Image Comparison – Visual Comparison for Two Images <= 1.1.21 - Missing Authorization
medium
The Before After Image Comparison – Visual Comparison for Two Images plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.1.21. This is due to a missing capability check on a function. This makes it possible for authenticated attackers, with subscriber-level access and above...
- CVSS:
- 4.3
(Wordfence)
- Affected:
- up to 1.1.21
- Fix:
- No patched version reported
- Disclosed:
- Oct 9, 2026
CVE-2026-62028 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database