CVE-2024-32433

The Ultimate Before After Image Slider & Gallery plugin (BEAF) versions prior to 4.5.5 contain a cross-site request forgery vulnerability that could enable attackers to trick authenticated users into performing unintended actions through malicious requests. An attacker with access to a victim's session could exploit this flaw to execute arbitrary operations with the victim's privileges. The issue was identified by Dhabaleshwar Das and has been resolved in version 4.5.5 and later.

Based on public CVE data (MITRE/NVD).