VYPR

Ultimate Before After Image Slider & Gallery

by WordPress

CVEs (1)

  • CVE-2025-15665Jul 14, 2026
    risk 0.00cvss epss 0.00

    The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.1 does not escape the value of the BEAF Slider widget's shortcode field before outputting it on the front end (the value is passed through do_shortcode, which echoes non-shortcode content verbatim),…