CVE-2025-2011

CVE-2025-2011 - Depicter 플러그인 SQL 인젝션 취약점 CVE 참조: CVE-2025-2011 이 저장소는 Depicter Slider & Popup Builder 플러그인버전 3.6.2의 SQL 인젝션 취약점을 테스트하기 위한 개념 증명PoC 환경을 포함합니다. 사전 요구 사항 Docker Docker Compose Python 3.x 필요한 Python 패키지: requests, colorama 설치 지침 1. 환경 시작 docker-compose up -d 2. WordPress 설치 완료 브라우저를 ...

CVE-2025-2011-poc

WordPress Depicter 플러그인 3.6.1 - SQL 인젝션 usage: exploit.py -h -u URL -D DATABASE -T TABLE -C COLUMN...

WordPress Depicter plugin < 4.8.0 - Editor+ Arbitrary File Upload via ZIP Import vulnerability

Editor+ Arbitrary File Upload via ZIP Import vulnerability discovered by md. minaruzzaman shovon in WordPress Plugin Depicter Slider versions 4.8.0...

CVE-2026-15049

The Depicter — Popup & Slider Builder WordPress plugin before 4.8.0 does not validate the type of a file uploaded through its import feature and does not remove a malformed upload, allowing users with editor-level access to write an arbitrary file including executable PHP into a web-accessible...

CVE-2026-15049

The Depicter — Popup & Slider Builder WordPress plugin (versions before 4.8.0 ) contains an arbitrary file upload vulnerability. The root cause is a failure to validate the type of files uploaded via the import feature and a failure to remove malformed uploads. This allows users with editor-level...

CVE-2026-15049 Depicter < 4.8.0 - Editor+ Arbitrary File Upload via ZIP Import

The Depicter — Popup & Slider Builder WordPress plugin before 4.8.0 does not validate the type of a file uploaded through its import feature and does not remove a malformed upload, allowing users with editor-level access to write an arbitrary file including executable PHP into a web-accessible...

CVE-2026-15049 Depicter < 4.8.0 - Editor+ Arbitrary File Upload via ZIP Import

The Depicter — Popup & Slider Builder WordPress plugin before 4.8.0 does not validate the type of a file uploaded through its import feature and does not remove a malformed upload, allowing users with editor-level access to write an arbitrary file including executable PHP into a web-accessible...

EUVD-2026-63202

The Depicter — Popup & Slider Builder WordPress plugin before 4.8.0 does not validate the type of a file uploaded through its import feature and does not remove a malformed upload, allowing users with editor-level access to write an arbitrary file including executable PHP into a web-accessible...

CVE-2026-15049: Unrestricted Upload of File with Dangerous Type

The Depicter — Popup & Slider Builder WordPress plugin before 4.8.0 does not validate the type of a file uploaded through its import feature and does not remove a malformed upload, allowing users with editor-level access to write an arbitrary file including executable PHP into a web-accessible...

PT-2026-78890

The Depicter — Popup & Slider Builder WordPress plugin before 4.8.0 does not validate the type of a file uploaded through its import feature and does not remove a malformed upload, allowing users with editor-level access to write an arbitrary file including executable PHP into a web-accessible...

CVE-2026-66622

Unauthenticated SQL Injection in Depicter Slider = 4.8.0 versions...

CVE-2026-66622 WordPress Depicter Slider plugin <= 4.8.0 - SQL Injection vulnerability

Unauthenticated SQL Injection in Depicter Slider = 4.8.0 versions...

EUVD-2026-60915

Unauthenticated SQL Injection in Depicter Slider = 4.8.0 versions...

CVE-2026-66622

Unauthenticated SQL Injection in Depicter Slider = 4.8.0 versions...

CVE-2026-66622 WordPress Depicter Slider plugin <= 4.8.0 - SQL Injection vulnerability

Unauthenticated SQL Injection in Depicter Slider = 4.8.0 versions...

CVE-2026-66622

The WordPress Depicter Slider plugin (versions ≤ 4.8.0) has an unauthenticated SQL injection vulnerability exploitable over the network, rated HIGH (CVSS 7.5), allowing database disclosure; no in-the-wild exploitation or patch details are provided in the documents. Patchstack's advisory is linked...

WordPress Depicter Slider plugin <= 4.8.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Peng Zhou in WordPress Plugin Depicter Slider versions = 4.8.0...

CVE-2026-66622: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Depicter Slider = 4.8.0 versions...

PT-2026-77058

Name of the Vulnerable Software and Affected Versions Depicter Slider versions prior to 4.8.1 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its...

CVE-2025-68558

Missing Authorization vulnerability in averta Depicter Slider depicter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Depicter Slider: from n/a through = 4.0.4...