CVE · High

CVE-2025-47549 — Ultimate Before After Image Slider & Gallery – BEAF [beaf-before-and-after-gallery] < 4.6.11

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-47549 Ultimate Before After Image Slider & Gallery – BEAF [beaf-before-and-after-gallery] < 4.6.11 Unrestricted Upload of File with Dangerous Type High 7.2 < 4.6.11 4.6.11 2025-05-07

CVE-2025-47549

The Ultimate Before After Image Slider & Gallery plugin for WordPress has a security flaw that allows authorized users with elevated privileges to upload any type of file without restriction in versions up to 4.6.10. This vulnerability could potentially be exploited by attackers to execute malicious code on the affected site's server.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.