CVE-2026-62034: WordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Cross Site Scripting (XSS) vulnerability

Q: What access does an attacker need to exploit this issue?

No authentication is required. Exploitation does require a user to interact with attacker-controlled content, as reflected by the user-interaction requirement in the CVSS vector.

Q: Which installations are affected?

WordPress sites using Before After Image Comparison – Image comparison for WP version 1.1.21 or earlier are affected.

Q: What impact can successful exploitation have?

The issue is cross-site scripting, which can allow attacker-supplied script to run in a user’s browser. The reported severity is high with low confidentiality, integrity, and availability impacts.

Published Oct 10, 2026

Updated

Unauthenticated Cross Site Scripting (XSS) in Before After Image Comparison – Image comparison for WP <= 1.1.21 versions.

Affected Software

1 affected component

WordPress Before After Image Comparison – Image comparison for WP<=1.1.21

Event History

Oct 10, 2026

CVE Published

via MITRE·07:35 PM

Data Sourced

via MITRE·07:35 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

No authentication is required. Exploitation does require a user to interact with attacker-controlled content, as reflected by the user-interaction requirement in the CVSS vector.

Which installations are affected?

WordPress sites using Before After Image Comparison – Image comparison for WP version 1.1.21 or earlier are affected.

What impact can successful exploitation have?

The issue is cross-site scripting, which can allow attacker-supplied script to run in a user’s browser. The reported severity is high with low confidentiality, integrity, and availability impacts.

CVE-2026-62034: WordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Cross Site Scripting (XSS) vulnerability

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Which installations are affected?

What impact can successful exploitation have?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Which installations are affected?

What impact can successful exploitation have?