Lucene search
+L

141 matches found

CNNVD
CNNVD
added 2024/06/20 12:00 a.m.14 views

WordPress Plugin Slider and Carousel slider by Depicter Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin.... A security vulnerability exists ...

6.5CVSS6.8AI score0.00514EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2024/06/19 5:16 p.m.12 views

WordPress Depicter plugin <= 3.0.2 - Authenticated Arbitrary Nonce Generation vulnerability

Authenticated Arbitrary Nonce Generation vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Depicter Slider versions = 3.0.2...

6.5CVSS6.9AI score0.00514EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/06/19 12:00 a.m.18 views

WordPress Depicter Slider Plugin <= 3.0.2 is vulnerable to Broken Access Control

Software Depicter Slider Type Plugin Vulnerable versions = 3.0.2 Fixed in 3.1.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-4390 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 56f1ad707b2c Credits Arkadiusz Hydzik Required...

6.5CVSS6.6AI score0.00514EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/03/16 1:15 a.m.9 views

CVE-2023-51491

Cross-Site Request Forgery CSRF vulnerability in Averta Depicter Slider.This issue affects Depicter Slider: from n/a through 2.0.6...

8.8CVSS5.8AI score0.00192EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/16 1:15 a.m.28 views

CVE-2023-51491

Cross-Site Request Forgery CSRF vulnerability in Averta Depicter Slider.This issue affects Depicter Slider: from n/a through 2.0.6...

8.8CVSS4.7AI score0.00192EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/16 12:59 a.m.31 views

CVE-2023-51491 WordPress Depicter Slider plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Averta Depicter Slider.This issue affects Depicter Slider: from n/a through 2.0.6...

5.4CVSS5.1AI score0.00192EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/16 12:59 a.m.54 views

CVE-2023-51491

CVE-2023-51491 – WordPress Depicter Slider plugin

8.8CVSS4.9AI score0.00192EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/16 12:59 a.m.12 views

CVE-2023-51491 WordPress Depicter Slider plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Averta Depicter Slider.This issue affects Depicter Slider: from n/a through 2.0.6...

5.4CVSS4.9AI score0.00192EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/16 12:00 a.m.9 views

WordPress Plugin Depicter Slider Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS6.7AI score0.00192EPSS
SaveExploits0References2
OSV
OSV
added 2024/01/05 2:15 a.m.13 views

CVE-2023-6493

The Depicter Slider – Responsive Image Slider, Video Slider & Post Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.6. This is due to missing or incorrect nonce validation on the 'save' function. This makes it possible for...

4.3CVSS7.1AI score0.00198EPSS
SaveExploits0References2
NVD
NVD
added 2024/01/05 2:15 a.m.24 views

CVE-2023-6493

The Depicter Slider – Responsive Image Slider, Video Slider & Post Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.6. This is due to missing or incorrect nonce validation on the 'save' function. This makes it possible for...

4.3CVSS4.5AI score0.00198EPSS
SaveExploits0References2
CVE
CVE
added 2024/01/05 2:02 a.m.59 views

CVE-2023-6493

The Depicter Slider WordPress plugin (Averta Depicter Slider) is vulnerable to Cross-Site Request Forgery in all versions up to 2.0.6 due to missing/incorrect nonce validation on the save function. Unauthenticated attackers can modify plugin settings by tricking an administrator into performing a...

4.3CVSS4.6AI score0.00198EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/05 2:02 a.m.6 views

CVE-2023-6493 Depicter Slider – Responsive Image Slider, Video Slider & Post Slider <= 2.0.6 - Cross-Site Request Forgery via save

The Depicter Slider – Responsive Image Slider, Video Slider & Post Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.6. This is due to missing or incorrect nonce validation on the 'save' function. This makes it possible for...

4.3CVSS6.5AI score0.00198EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/01/05 2:02 a.m.39 views

CVE-2023-6493 Depicter Slider – Responsive Image Slider, Video Slider & Post Slider <= 2.0.6 - Cross-Site Request Forgery via save

The Depicter Slider – Responsive Image Slider, Video Slider & Post Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.6. This is due to missing or incorrect nonce validation on the 'save' function. This makes it possible for...

4.3CVSS4.7AI score0.00198EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
added 2024/01/05 12:00 a.m.21 views

Depicter Slider < 2.0.7 - Settings Update via CSRF

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

4.3CVSS7AI score0.00198EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/01/05 12:00 a.m.12 views

WordPress plugin Depicter Slider security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

4.3CVSS6.6AI score0.00198EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/01/05 12:00 a.m.9 views

PT-2024-14150 · Unknown · Averta Depicter Slider

Name of the Vulnerable Software and Affected Versions: Averta Depicter Slider versions 2.0.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in Averta Depicter Slider. This type of vulnerability allows an attacker to trick a user into performing unintended...

8.8CVSS7AI score0.00192EPSS
SaveExploits0References9
Patchstack
Patchstack
added 2024/01/04 12:00 a.m.26 views

WordPress Depicter Slider Plugin <= 2.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software Depicter Slider Type Plugin Vulnerable versions = 2.0.6 Fixed in 2.0.7 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-6493 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 15e2f683e7f4 Credits Rafshanzani Suhada...

4.3CVSS6.6AI score0.00198EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2023/12/27 12:00 a.m.23 views

WordPress Depicter Slider Plugin <= 2.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software Depicter Slider Type Plugin Vulnerable versions = 2.0.6 Fixed in 2.0.7 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-51491 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 121cc482ad3d Credits Abdi Pranata Requir...

8.8CVSS6.6AI score0.00192EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/04/28 12:00 a.m.14 views

WordPress Depicter Slider Plugin <= 1.9.0 is vulnerable to Broken Access Control

Software Depicter Slider Type Plugin Vulnerable versions = 1.9.0 Fixed in 1.9.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-47176 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 539ee2ac709d Credits thiennv Required privilege...

6.9AI score0.00518EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder