WP Clinic
Log in Sign up

CVE · Medium

CVE-2022-47176 — Depicter — Popup & Slider Builder [depicter] < 1.9.1

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2022-47176 Depicter — Popup & Slider Builder [depicter] < 1.9.1 Missing Authorization Medium 4.3 < 1.9.1 1.9.1 2023-04-28

CVE-2022-47176

The Depicter Slider plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on multiple functions in versions up to, and including, 1.9.0. This makes it possible for authenticated attackers, with contributor-level access and above, to create, publish, and edit sliders

Source: Wordfence

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.