EUVD-2025-37312

The Depicter plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions less than, or equal to, 4.0.4. This is due to missing or incorrect nonce validation on the depicter-document-rules-store function. This makes it possible for unauthenticated attackers to modify document rule...

PT-2025-44593

Name of the Vulnerable Software and Affected Versions The Depicter plugin for WordPress versions prior to 4.0.5 Description The Depicter plugin for WordPress is susceptible to Cross-Site Request Forgery CSRF due to missing or incorrect nonce validation within the depicter-document-rules-store...

WordPress plugin Depicter 跨站请求伪造漏洞

WordPress Depicter plugin is a slider, popup and rotator image creation tool designed for WordPress, offering a no-code interface and rich customization features. The WordPress Depicter plugin suffers from a cross-site request forgery vulnerability, which originates from a web application that do...

EUVD-2024-44556

Malicious code in bioql PyPI...

EUVD-2022-49951

Malicious code in bioql PyPI...

EUVD-2024-36646

Malicious code in bioql PyPI...

EUVD-2024-40088

Malicious code in bioql PyPI...

EUVD-2024-42417

Malicious code in bioql PyPI...

EUVD-2024-44023

Malicious code in bioql PyPI...

EUVD-2024-42395

Malicious code in bioql PyPI...

EUVD-2023-56204

Malicious code in bioql PyPI...

CVE-2024-43161

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Averta Depicter Slider allows Stored XSS.This issue affects Depicter Slider: from n/a through 3.1.2...

CVE-2024-4390

The Slider and Carousel slider by Depicter plugin for WordPress is vulnerable to Arbitrary Nonce Generation in all versions up to, and including, 3.0.2. This makes it possible for authenticated attackers with contributor access and above, to generate a valid nonce for any WordPress action/functio...

CVE-2024-47381

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in averta Depicter Slider depicter allows Stored XSS.This issue affects Depicter Slider: from n/a through = 3.2.2...

CVE-2024-37414

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Depicter Slider and Popup by Averta Depicter Slider allows Stored XSS.This issue affects Depicter Slider: from n/a through 3.0.2...

CVE-2024-4633

The Slider and Carousel slider by Depicter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘addExtraMimeType’ function in versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

CVE-2024-47359

Cross-Site Request Forgery CSRF vulnerability in averta Depicter Slider depicter.This issue affects Depicter Slider: from n/a through = 3.2.2...

CVE-2023-6493

The Depicter Slider – Responsive Image Slider, Video Slider & Post Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.6. This is due to missing or incorrect nonce validation on the 'save' function. This makes it possible for...

CVE-2023-51491

Cross-Site Request Forgery CSRF vulnerability in Averta Depicter Slider.This issue affects Depicter Slider: from n/a through 2.0.6...

CVE-2022-47176

Missing Authorization vulnerability in Depicter Slider and Popup by Averta Depicter Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Depicter Slider: from n/a through 1.9.0...