CVE Database /
CVE-2024-47359
CVE · Medium
CVE-2024-47359 — Depicter — Popup & Slider Builder [depicter] < 3.5.0
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-47359
|
Depicter — Popup & Slider Builder [depicter] < 3.5.0 |
Cross-Site Request Forgery (CSRF) |
Medium
5.3
|
< 3.5.0
|
3.5.0 |
2024-09-30 |
—
|
CVE-2024-47359
The Depicter plugin for WordPress, used for creating sliders and popups, contains a vulnerability in versions 3.2.2 and earlier where a function lacks proper permission validation. This oversight allows attackers without authentication credentials to execute unauthorized actions within the plugin. The issue affects all installations running the vulnerable version range prior to the 3.5.0 fix.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings