Lucene search
+L

141 matches found

NVD
NVD
added 2024/11/01 3:15 p.m.36 views

CVE-2024-47359

Cross-Site Request Forgery CSRF vulnerability in averta Depicter Slider depicter.This issue affects Depicter Slider: from n/a through = 3.2.2...

9.8CVSS0.003EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/01 2:17 p.m.37 views

CVE-2024-47359 WordPress Depicter plugin <= 3.2.2 - Broken Access Control vulnerability

Cross-Site Request Forgery CSRF vulnerability in averta Depicter Slider depicter.This issue affects Depicter Slider: from n/a through = 3.2.2...

5.3CVSS0.003EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/01 2:17 p.m.18 views

CVE-2024-47359 WordPress Depicter plugin <= 3.2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Depicter Slider and Popup by Averta Depicter Slider allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Depicter Slider: from n/a through 3.2.2...

5.3CVSS5.4AI score0.003EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/01 2:17 p.m.71 views

CVE-2024-47359

CVE-2024-47359 affects the WordPress plugin Depicter Slider (Slider & Popup Builder) versions ≤ 3.2.2. The issue is a Broken Access Control (Missing Authorization) vulnerability. A fix is available in version 3.5.0 . Patchstack assigns a low severity (CVSS v3.1 5.3) and indicates low exploitabili...

9.8CVSS5.9AI score0.003EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/11/01 12:00 a.m.8 views

WordPress plugin Depicter Slider 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS6.6AI score0.003EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/05 3:15 p.m.19 views

CVE-2024-47381

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in averta Depicter Slider depicter allows Stored XSS.This issue affects Depicter Slider: from n/a through = 3.2.2...

5.9CVSS0.0026EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/05 3:15 p.m.12 views

CVE-2024-47381

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Averta Depicter Slider allows Stored XSS.This issue affects Depicter Slider: from n/a through 3.2.2...

4.8CVSS5.8AI score0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/05 2:58 p.m.37 views

CVE-2024-47381 WordPress Slider & Popup Builder by Depicter plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in averta Depicter Slider depicter allows Stored XSS.This issue affects Depicter Slider: from n/a through = 3.2.2...

5.9CVSS0.0026EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/05 2:58 p.m.58 views

CVE-2024-47381

CVE-2024-47381 is a stored XSS in Averta Depicter Slider (WordPress Slider & Popup Builder). Public sources confirm vulnerability in Depicter Slider up to version 3.2.2, with a fixed release in 3.5.0. Root cause: improper neutralization of input during web page generation that enables stored XSS....

5.9CVSS5.9AI score0.0026EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/05 2:58 p.m.19 views

CVE-2024-47381 WordPress Slider & Popup Builder by Depicter plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Averta Depicter Slider allows Stored XSS.This issue affects Depicter Slider: from n/a through 3.2.2...

5.9CVSS6.8AI score0.0026EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/05 12:00 a.m.15 views

PT-2024-32600 · Unknown · Averta Depicter Slider

Name of the Vulnerable Software and Affected Versions: Averta Depicter Slider versions prior to 3.2.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in Averta Depicter Slider...

5.9CVSS5.8AI score0.0026EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/10/05 12:00 a.m.11 views

WordPress plugin Depicter Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6.2AI score0.0026EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/09/30 10:39 a.m.9 views

WordPress Slider & Popup Builder by Depicter plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Savphill Patchstack Alliance in WordPress Plugin Depicter Slider versions = 3.2.2...

5.9CVSS6.1AI score0.0026EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/09/30 9:17 a.m.10 views

WordPress Depicter plugin <= 3.2.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Depicter Slider versions = 3.2.2...

9.8CVSS7AI score0.003EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/09/30 12:00 a.m.16 views

WordPress Depicter Slider Plugin <= 3.2.2 is vulnerable to Broken Access Control

Software Depicter Slider Type Plugin Vulnerable versions = 3.2.2 Fixed in 3.5.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-47359 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID fe95aaab539d Credits Rafie Muhammad Patchstack...

9.8CVSS6.5AI score0.003EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/09/30 12:00 a.m.21 views

WordPress Depicter Slider Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)

Software Depicter Slider Type Plugin Vulnerable versions = 3.2.2 Fixed in 3.5.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47381 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID c88e18af2d73 Credits savphill Required privilege Editor...

5.9CVSS6.5AI score0.0026EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2024/08/14 8:29 a.m.12 views

EUVD-2024-44022

The Slider and Carousel slider by Depicter plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadFile function in all versions up to, and including, 3.1.1. This makes it possible for authenticated attackers, with contributor access or higher...

8.8CVSS7.2AI score0.01021EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/08/14 8:29 a.m.291 views

CVE-2024-4389 Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.1.1 - Authenticated (Contributor+) Arbitrary File Upload

The Slider and Carousel slider by Depicter plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadFile function in all versions up to, and including, 3.1.1. This makes it possible for authenticated attackers, with contributor access or higher...

8.8CVSS0.01021EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/08/14 1:05 a.m.10 views

WordPress Depicter Slider plugin <= 3.1.1 - Authenticated (Contributor+) Arbitrary File Upload vulnerability

Authenticated Contributor+ Arbitrary File Upload vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Depicter Slider versions = 3.1.1...

8.8CVSS7AI score0.01021EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/08/14 12:00 a.m.11 views

WordPress plugin Slider and Carousel slider by Depicter 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

8.8CVSS6.8AI score0.01021EPSS
SaveExploits0References4
Rows per page
Query Builder