Averta

Depicter Slider

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2025-68558

  • EPSS 0.05%
  • Veröffentlicht 22.01.2026 16:52:08
  • Zuletzt bearbeitet 27.01.2026 22:15:52

Missing Authorization vulnerability in averta Depicter Slider depicter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Depicter Slider: from n/a through <= 4.0.4.

4.3

CVE-2022-47176

  • EPSS 0.14%
  • Veröffentlicht 13.12.2024 15:15:10
  • Zuletzt bearbeitet 23.01.2026 20:13:37

Missing Authorization vulnerability in Depicter Slider and Popup by Averta Depicter Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Depicter Slider: from n/a through 1.9.0.

6.4

CVE-2024-4633

  • EPSS 0.11%
  • Veröffentlicht 06.12.2024 14:15:20
  • Zuletzt bearbeitet 06.12.2024 14:15:20

The Slider and Carousel slider by Depicter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘addExtraMimeType’ function in versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This ...

4.8

CVE-2024-47381

  • EPSS 0.11%
  • Veröffentlicht 05.10.2024 15:15:14
  • Zuletzt bearbeitet 23.01.2026 19:37:18

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Averta Depicter Slider allows Stored XSS.This issue affects Depicter Slider: from n/a through 3.2.2.

4.8

CVE-2024-43161

  • EPSS 0.19%
  • Veröffentlicht 12.08.2024 22:15:10
  • Zuletzt bearbeitet 23.01.2026 19:37:54

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Averta Depicter Slider allows Stored XSS.This issue affects Depicter Slider: from n/a through 3.1.2.

5.4

CVE-2024-1357

  • EPSS 0.15%
  • Veröffentlicht 16.04.2024 10:15:07
  • Zuletzt bearbeitet 22.05.2025 17:31:51

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's aux_timeline shortcode in all versions up to, and including, 2.15.5 due to insufficient input sanitization and output...

4.3

CVE-2023-6493

  • EPSS 0.06%
  • Veröffentlicht 05.01.2024 02:15:07
  • Zuletzt bearbeitet 21.11.2024 08:43:57

The Depicter Slider – Responsive Image Slider, Video Slider & Post Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.6. This is due to missing or incorrect nonce validation on the 'save'...