Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Ultimate Before After Image Slider & Gallery 4.7.19 Clear all filters
TI-2025-14283 CVE-2025-15664 · GHSA-jmj2-wp2q-8p2g

BEAF < 4.7.19 - Author+ Stored XSS via Before Label

Priority LOW 32

The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.19 does not properly escape the slider's before-label value before its bundled client-side script re-injects it into the DOM, allowing users wi…

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00431 Published 2026-09-02 Fixed in 4.7.19 CWE-79
TI-2025-14282 CVE-2025-15663 · GHSA-w7c4-c6pr-wv3j

BEAF < 4.7.19 - Author+ Stored XSS via After Label

Priority LOW 32

The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.19 does not properly escape the slider's after-label value before its bundled client-side script re-injects it into the DOM, allowing users wit…

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00431 Published 2026-09-02 Fixed in 4.7.19 CWE-79