WP-Safety

Before After Image Security & Risk Analysis

wordpress.org/plugins/majestic-before-after-image

Before After Image with a draggable handle. Works with Elementor, WooCommerce, and shortcode.

900 active installs v3.0.2 PHP 5.6+ WP 6.2+ Updated Jun 11, 2026
before-after-imagecomparisonelementorshortcodewoocommerce
99
A · Safe
CVEs total1
Unpatched0
Last CVEOct 3, 2025
Plugin page Download
Safety Verdict

Is Before After Image Safe to Use in 2026?

Generally Safe

Score 99/100

Before After Image has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.

1 known CVELast CVE: Oct 3, 2025Updated 2mo ago
Risk Assessment

The "majestic-before-after-image" plugin v2.0.3 exhibits a generally positive security posture based on the static analysis. The absence of identified AJAX handlers, REST API routes, shortcodes, cron events, and dangerous functions suggests a limited attack surface and no immediate code execution or command injection risks within the analyzed code. Furthermore, the complete use of prepared statements for SQL queries and a high percentage of properly escaped output are excellent practices that mitigate common web vulnerabilities. The lack of file operations and external HTTP requests also reduces the potential for unauthorized file manipulation or data exfiltration.

Key Concerns

  • Vulnerability history includes a medium severity CVE
  • No nonce checks found
  • No capability checks found
  • Some output not properly escaped
Vulnerabilities
1 published

Before After Image Security Vulnerabilities

CVEs by Year

1 CVE in 2025
2025
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2025-9030medium · 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Majestic Before After Image <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Oct 3, 2025 Patched in 2.0.3 (1d)
Version History

Before After Image Release Timeline

v3.0.2Current
v3.0.1
v3.0.0
v2.0.4
v2.0.3
v2.0.21 CVE
CVE-2025-9030
v2.0.11 CVE
CVE-2025-9030
v2.0.01 CVE
CVE-2025-9030
v1.0.121 CVE
CVE-2025-9030
v1.0.111 CVE
CVE-2025-9030
v1.0.101 CVE
CVE-2025-9030
v1.0.91 CVE
CVE-2025-9030
v1.0.81 CVE
CVE-2025-9030
v1.0.61 CVE
CVE-2025-9030
v1.0.51 CVE
CVE-2025-9030
v1.0.41 CVE
CVE-2025-9030
v1.0.31 CVE
CVE-2025-9030
v1.0.21 CVE
CVE-2025-9030
v1.0.11 CVE
CVE-2025-9030
v1.0.01 CVE
CVE-2025-9030
Code Analysis
Analyzed Mar 16, 2026

Before After Image Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
6
32 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

84% escaped38 total outputs
Attack Surface

Before After Image Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 14
actionwp_welcome_initinc\admin-page\admin-page.php:23
actionelementor/widgets/registerinc\elementor\elementor.php:45
actionelementor/elements/categories_registeredinc\elementor\elementor.php:48
actioninitinc\mbai.php:24
actionplugins_loadedinc\mbai.php:27
actionadmin_initinc\mbai.php:30
actionadmin_noticesinc\mbai.php:56
actionwp_welcome_inittrunk\inc\admin-page\admin-page.php:23
actionelementor/widgets/registertrunk\inc\elementor\elementor.php:45
actionelementor/elements/categories_registeredtrunk\inc\elementor\elementor.php:48
actioninittrunk\inc\mbai.php:24
actionplugins_loadedtrunk\inc\mbai.php:27
actionadmin_inittrunk\inc\mbai.php:30
actionadmin_noticestrunk\inc\mbai.php:56
Maintenance & Trust

Before After Image Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2
Last updatedJun 11, 2026
PHP min version5.6
Downloads12K

Community Trust

Rating100/100
Number of ratings3
Active installs900
Alternatives

Before After Image Alternatives

Futurio Extra

Futurio Extra

futurio-extra

A
96

Futurio Extra add extra features to Futurio theme like widgets, WooCommerce options, Elementor widgets, one click demo import and much more.

20K 7 CVEs
Before After Image Comparison Slider for Elementor

Before After Image Comparison Slider for Elementor

before-after-image-comparison-slider-for-elementor

A
100

Before After Image Comparison Slider for Elementor is an image comparison slider plugin for Elementor Page Builder. This plugin allows you to create t &hellip;

10K No CVEs
Advanced Image Comparison for Elementor

Advanced Image Comparison for Elementor

advanced-image-comparison-for-elementor

A
100

Advanced Image Comparison is a fully Responsive, you can add before image and after image.

1K No CVEs
Admire Extra

Admire Extra

admire-extra

A
91

Admire extra is a elementor as well as Gutenberg template library where you can choose from available designs and use them with any WordPress theme fr &hellip;

20 1 CVE
Ace Products Filters

Ace Products Filters

ace-products-filters

A
100

Advanced free Wordpress filters for WooCommerce with unlimited sets, AJAX updates, styling controls, fully responsive, and dedicated Elementor widget.

10 No CVEs
Developer Profile

Before After Image Developer Profile

Scott Paterson

13 plugins · 42K total installs

76
trust score
Avg Security Score
96/100
Avg Patch Time
252 days
View full developer profile
Detection Fingerprints

How We Detect Before After Image

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/majestic-before-after-image/assets/css/frontend.css/wp-content/plugins/majestic-before-after-image/assets/js/frontend.js
Script Paths
/wp-content/plugins/majestic-before-after-image/assets/js/frontend.js
Version Parameters
majestic-before-after-image/assets/css/frontend.css?ver=majestic-before-after-image/assets/js/frontend.js?ver=

HTML / DOM Fingerprints

CSS Classes
majestic-before-after-image
Data Attributes
data-mbai-img-src-beforedata-mbai-img-src-after
JS Globals
mbai_frontend_params
Shortcode Output
[majestic_image_comparison before_image=
FAQ

Frequently Asked Questions about Before After Image