PLUGIN SECURITY

Is Beaf Before And After Gallery safe?

Need a Before After Image Comparison slider? Create your before and after slider with BEAF. Addon for Elementor Before and After Slider is included.

What this plugin does

  • Slug: beaf-before-and-after-gallery
  • Author: Themefic
  • 30000+ active installs
  • 98/100 rating (106 reviews on wordpress.org)
  • 1125594 all-time downloads
  • On WordPress.org since 2020-01-29

before afterbefore after sliderbefore and after sliderbefore-after-elementorelementor before and after slider

Maintenance status

  • Latest known version: 4.7.18
  • Last updated: 2026-08-24 10:44am GMT
  • Tested up to WordPress: 7.1
  • Requires PHP: 7.4+

Known vulnerabilities

5 known CVEs on file for Beaf Before And After Gallery. Reported between 2024 and 2026.

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-15664 Ultimate Before After Image Slider & Gallery – BEAF [beaf-before-and-after-gallery] < 4.7.19 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Unknown < 4.7.19 4.7.19 2026-09-02 ⚠ update needed
CVE-2025-15663 Ultimate Before After Image Slider & Gallery – BEAF [beaf-before-and-after-gallery] < 4.7.19 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Unknown < 4.7.19 4.7.19 2026-09-02 ⚠ update needed
CVE-2025-15665 Ultimate Before After Image Slider & Gallery – BEAF [beaf-before-and-after-gallery] < 4.7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Unknown < 4.7.1 4.7.1 2026-06-23 ✓ fixed in latest
CVE-2025-47549 Ultimate Before After Image Slider & Gallery – BEAF [beaf-before-and-after-gallery] < 4.6.11 Unrestricted Upload of File with Dangerous Type High 7.2 < 4.6.11 4.6.11 2025-05-07 ✓ fixed in latest
CVE-2024-32433 Ultimate Before After Image Slider & Gallery – BEAF [beaf-before-and-after-gallery] < 4.5.5 Cross-Site Request Forgery (CSRF) Medium 4.3 < 4.5.5 4.5.5 2024-04-12 ✓ fixed in latest

How to fix it

Keep Beaf Before And After Gallery updated — 4.7.18 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.