Extension WordPress
Vulnérabilités Ultimate Before After Image Slider & Gallery – BEAF
Cette page rassemble les failles publiées pour Ultimate Before After Image Slider & Gallery – BEAF, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Ultimate Before After Image Slider & Gallery – BEAF
2 fiches
BEAF <= 4.6.10 – Authenticated (Admin+) Arbitrary File Upload
The Ultimate Before After Image Slider & Gallery – BEAF plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 4.6.10. This makes it possible for…
*-4.6.10
4.6.11
07/05/2025
BEAF <= 4.5.4 – Cross-Site Request Forgery to Notice Dismissal
The BEAF plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.4. This is due to missing or incorrect nonce validation on the bafg_new_feature_notice_dismissed() function. This makes it possible for unauthenticated attackers…
*-4.5.4
4.5.5
12/04/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.