CVE-2025-2011

CVE-2025-2011 - Depicter 插件 SQL 注入漏洞 CVE 参考： CVE-2025-2011 本仓库包含一个用于测试 Depicter Slider & Popup Builder 插件（版本 3.6.2）中 SQL 注入漏洞的概念验证环境。 前提条件 Docker Docker Compose Python 3.x 所需 Python 包：requests、colorama 搭建说明 1. 启动环境 root@kitploit: docker-compose up -d 2. 完成 WordPress 安装 打开浏览器并访问...

CVE-2025-2011-poc

WordPress Depicter Plugin 3.6.1 - Inyección SQL root@kitploit: usage: exploit.py -h -u URL -D DATABASE -T TABLE -C COLUMN...

CVE-2026-15049

The Depicter — Popup & Slider Builder WordPress plugin before 4.8.0 does not validate the type of a file uploaded through its import feature and does not remove a malformed upload, allowing users with editor-level access to write an arbitrary file including executable PHP into a web-accessible...

CVE-2026-15049

CVE-2026-15049 affects the Depicter — Popup & Slider Builder WordPress plugin in versions prior to 4.8.0 . The plugin's import feature does not validate the type of uploaded files and fails to remove malformed uploads, allowing any user with editor-level access to write an arbitrary file—includin...

CVE-2026-15049 Depicter < 4.8.0 - Editor+ Arbitrary File Upload via ZIP Import

The Depicter — Popup & Slider Builder WordPress plugin before 4.8.0 does not validate the type of a file uploaded through its import feature and does not remove a malformed upload, allowing users with editor-level access to write an arbitrary file including executable PHP into a web-accessible...

EUVD-2026-63202

The Depicter — Popup & Slider Builder WordPress plugin before 4.8.0 does not validate the type of a file uploaded through its import feature and does not remove a malformed upload, allowing users with editor-level access to write an arbitrary file including executable PHP into a web-accessible...

CVE-2026-66622

Unauthenticated SQL Injection in Depicter Slider = 4.8.0 versions...

CVE-2026-66622 WordPress Depicter Slider plugin <= 4.8.0 - SQL Injection vulnerability

Unauthenticated SQL Injection in Depicter Slider = 4.8.0 versions...

CVE-2026-66622

Unauthenticated SQL Injection in Depicter Slider = 4.8.0 versions...

EUVD-2026-60915

Unauthenticated SQL Injection in Depicter Slider = 4.8.0 versions...

CVE-2026-66622

The WordPress Depicter Slider plugin (versions ≤ 4.8.0) has an unauthenticated SQL injection vulnerability exploitable over the network, rated HIGH (CVSS 7.5), allowing database disclosure; no in-the-wild exploitation or patch details are provided in the documents. Patchstack's advisory is linked...

PT-2026-77058

Name of the Vulnerable Software and Affected Versions Depicter Slider versions prior to 4.8.1 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its...

CVE-2025-68558

Missing Authorization vulnerability in averta Depicter Slider depicter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Depicter Slider: from n/a through = 4.0.4...

CVE-2025-68558

Missing Authorization vulnerability in averta Depicter Slider depicter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Depicter Slider: from n/a through = 4.0.4...

CVE-2025-68558

Missing Authorization vulnerability in averta Depicter Slider depicter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Depicter Slider: from n/a through = 4.0.4...

CVE-2025-68558 WordPress Depicter Slider plugin <= 4.0.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in averta Depicter Slider depicter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Depicter Slider: from n/a through = 4.0.4...

CVE-2025-68558 WordPress Depicter Slider plugin <= 4.0.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in averta Depicter Slider depicter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Depicter Slider: from n/a through = 4.0.4...

CVE-2025-68558

CVE-2025-68558 : A missing/incorrect authorization control in averta Depicter Slider (Depicter) allows unauthorized access due to misconfigured access control levels. Affected: Depicter Slider up to and including version 4.0.4. Impact/notes: CVSS 3.1 base score 6.5 (Medium); attack vector Network...

WordPress plugin Depicter Slider has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-4082

Name of the Vulnerable Software and Affected Versions averta Depicter Slider versions through 4.0.4 Description An issue exists in averta Depicter Slider where incorrectly configured access control security levels can be exploited, leading to a missing authorization condition. Recommendations...