Lucene search
+L

3 matches found

OSV
OSV
added 2024/01/05 2:15 a.m.10 views

CVE-2023-6493

The Depicter Slider – Responsive Image Slider, Video Slider & Post Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.6. This is due to missing or incorrect nonce validation on the 'save' function. This makes it possible for...

4.3CVSS7.1AI score0.00198EPSS
SaveExploits0References2
CVE
CVE
added 2024/01/05 2:2 a.m.53 views

CVE-2023-6493

The Depicter Slider WordPress plugin (Averta Depicter Slider) is vulnerable to Cross-Site Request Forgery in all versions up to 2.0.6 due to missing/incorrect nonce validation on the save function. Unauthenticated attackers can modify plugin settings by tricking an administrator into performing a...

4.3CVSS4.6AI score0.00198EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/01/04 12:0 a.m.22 views

WordPress Depicter Slider Plugin <= 2.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software Depicter Slider Type Plugin Vulnerable versions = 2.0.6 Fixed in 2.0.7 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-6493 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 15e2f683e7f4 Credits Rafshanzani Suhada...

4.3CVSS6.6AI score0.00198EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder