CVE-2026-92767 | Twenty20 Image Before-After Plugin up to 2.0.5 on WordPress Shortcode offset cross site scripting

October 3, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Twenty20 Image Before-After Plugin up to 2.0.5 on WordPress. Impacted is an unknown function of the component Shortcode Handler. Such manipulation of the argument offset leads to cross site scripting.

This vulnerability is referenced as CVE-2026-92767. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More