CVE-2024-4390

The Depicter plugin versions 3.0.2 and earlier contain a flaw that allows authenticated users with contributor-level permissions or higher to create valid nonces for arbitrary WordPress actions and functions. By exploiting this vulnerability, attackers could bypass nonce-based security protections and trigger protected functionality that should require proper authorization verification. The issue affects the plugin's slider and carousel features across all versions prior to 3.1.0.

Based on public CVE data (MITRE/NVD).