Lucene search
+L

6 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/20 12:00 a.m.•1 views

CVE-2026-15049: Unrestricted Upload of File with Dangerous Type

The Depicter — Popup & Slider Builder WordPress plugin before 4.8.0 does not validate the type of a file uploaded through its import feature and does not remove a malformed upload, allowing users with editor-level access to write an arbitrary file including executable PHP into a web-accessible...

7.2CVSS6.3AI score0.00629EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/11/06 7:17 a.m.•15 views

CVE-2025-11373

The Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability checks in the "depicter-media-upload" AJAX route in all...

4.3CVSS5.5AI score0.00233EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/05 6:35 a.m.•7 views

CVE-2025-11373 Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Safe File Type Upload

The Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability checks in the "depicter-media-upload" AJAX route in all...

4.3CVSS5.1AI score0.00233EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/11/05 12:00 a.m.•14 views

WordPress plugin Popup and Slider Builder by Depicter 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A security...

4.3CVSS6.4AI score0.00233EPSS
SaveExploits0References5
OSV
OSV
•added 2024/12/13 3:15 p.m.•12 views

CVE-2022-47176

Missing Authorization vulnerability in Depicter Slider and Popup by Averta Depicter Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Depicter Slider: from n/a through 1.9.0...

4.3CVSS5.8AI score0.00532EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/01 3:15 p.m.•9 views

CVE-2024-47359

Missing Authorization vulnerability in Depicter Slider and Popup by Averta Depicter Slider allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Depicter Slider: from n/a through 3.2.2...

9.8CVSS5.8AI score0.003EPSS
SaveExploits0References1
Rows per page
Query Builder