CVE · Medium

CVE-2022-47176 — Depicter — Popup & Slider Builder [depicter] < 1.9.1

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2022-47176 Depicter — Popup & Slider Builder [depicter] < 1.9.1 Missing Authorization Medium 4.3 < 1.9.1 1.9.1 2023-04-28

CVE-2022-47176

The Depicter Slider plugin for WordPress contains a vulnerability in versions 1.9.0 and earlier where multiple functions lack proper capability verification. This flaw allows authenticated users with contributor-level permissions or higher to create, modify, and publish slider content without proper authorization checks. The issue was resolved in version 1.9.1.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.