Vulnerabilities

TI-2024-31677 CVE-2024-47359 · GHSA-fjf9-rfw2-524c

WordPress Depicter plugin <= 3.2.2 - Broken Access Control vulnerability

MEDIUM 48

Cross-Site Request Forgery (CSRF) vulnerability in averta Depicter Slider depicter.This issue affects Depicter Slider: from n/a through <= 3.2.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.003 Published 2024-11-01 No fix listed CWE-352

TI-2024-24918 CVE-2024-37414 · GHSA-4j3p-jf3j-fvwj

WordPress Depicter Slider plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Depicter Slider and Popup by Averta Depicter Slider allows Stored XSS.This issue affects Depicter Slider: from…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00259 Published 2024-07-22 No fix listed CWE-79

TI-2024-04090 CVE-2024-4390 · GHSA-w495-r927-3gp6

Depicter <= 3.0.2 - Authenticated (Contributor+) Arbitrary Nonce Generation

LOW 29

The Slider and Carousel slider by Depicter plugin for WordPress is vulnerable to Arbitrary Nonce Generation in all versions up to, and including, 3.0.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00514 Published 2024-06-20 No fix listed CWE-863

TI-2023-28143 CVE-2023-51491 · GHSA-9gmf-mg2v-j8r6

WordPress Depicter Slider plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) vulnerability

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in Averta Depicter Slider.This issue affects Depicter Slider: from n/a through 2.0.6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00192 Published 2024-03-16 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Depicter plugin <= 3.2.2 - Broken Access Control vulnerability

WordPress Depicter Slider plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability

Depicter <= 3.0.2 - Authenticated (Contributor+) Arbitrary Nonce Generation

WordPress Depicter Slider plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) vulnerability