Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for Ultimate Before After Image Slider & Gallery by Unknown

    CVE-2025-15665 (GCVE-0-2025-15665)

    Vulnerability from nvd – Published: 2026-07-14 06:00 – Updated: 2026-07-14 06:00
    VLAI
    Title
    BEAF < 4.7.1 - Admin+ Stored XSS via Widget Shortcode Field
    Summary
    The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.1 does not escape the value of the BEAF Slider widget's shortcode field before outputting it on the front end (the value is passed through do_shortcode, which echoes non-shortcode content verbatim), allowing users with administrator-level access to store a script that executes in the browser of any visitor who loads a page displaying the widget.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/754f0960-efc8-42… exploitvdb-entrytechnical-description
    Impacted products
    Credits
    Dmitrii Ignatyev WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Ultimate Before After Image Slider \u0026 Gallery",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "4.7.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Dmitrii Ignatyev"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Ultimate Before After Image Slider \u0026 Gallery  WordPress plugin before 4.7.1 does not escape the value of the BEAF Slider widget\u0027s shortcode field before outputting it on the front end (the value is passed through do_shortcode, which echoes non-shortcode content verbatim), allowing users with administrator-level access to store a script that executes in the browser of any visitor who loads a page displaying the widget."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79 Cross-Site Scripting (XSS)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-14T06:00:01.908Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/754f0960-efc8-426f-bb1d-7cceec920910/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "BEAF \u003c 4.7.1 - Admin+ Stored XSS via Widget Shortcode Field",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2025-15665",
    "datePublished": "2026-07-14T06:00:01.908Z",
    "dateReserved": "2026-06-23T11:11:48.893Z",
    "dateUpdated": "2026-07-14T06:00:01.908Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2025-15665 (GCVE-0-2025-15665)

    Vulnerability from cvelistv5 – Published: 2026-07-14 06:00 – Updated: 2026-07-14 06:00
    VLAI
    Title
    BEAF < 4.7.1 - Admin+ Stored XSS via Widget Shortcode Field
    Summary
    The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.1 does not escape the value of the BEAF Slider widget's shortcode field before outputting it on the front end (the value is passed through do_shortcode, which echoes non-shortcode content verbatim), allowing users with administrator-level access to store a script that executes in the browser of any visitor who loads a page displaying the widget.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/754f0960-efc8-42… exploitvdb-entrytechnical-description
    Impacted products
    Credits
    Dmitrii Ignatyev WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Ultimate Before After Image Slider \u0026 Gallery",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "4.7.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Dmitrii Ignatyev"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Ultimate Before After Image Slider \u0026 Gallery  WordPress plugin before 4.7.1 does not escape the value of the BEAF Slider widget\u0027s shortcode field before outputting it on the front end (the value is passed through do_shortcode, which echoes non-shortcode content verbatim), allowing users with administrator-level access to store a script that executes in the browser of any visitor who loads a page displaying the widget."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79 Cross-Site Scripting (XSS)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-14T06:00:01.908Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/754f0960-efc8-426f-bb1d-7cceec920910/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "BEAF \u003c 4.7.1 - Admin+ Stored XSS via Widget Shortcode Field",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2025-15665",
    "datePublished": "2026-07-14T06:00:01.908Z",
    "dateReserved": "2026-06-23T11:11:48.893Z",
    "dateUpdated": "2026-07-14T06:00:01.908Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}