Advisories · Technology
averta Depicter — Popup & Slider Builder.
Every CVE that names averta Depicter — Popup & Slider Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Depicter <= 4.0.7 - Missing Authorization to Unauthenticated Display Rule Updates
- averta Depicter — Popup & Slider Builder
- Broken access control
- CVSS 4.3 Medium
Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel <= 4.0.4 - Missing Authorization to Authenticated (Co…
- averta Depicter — Popup & Slider Builder
- Broken access control
- CVSS 4.3 Medium
Depicter <= 4.0.4 - Cross-Site Request Forgery
- averta Depicter — Popup & Slider Builder
- Cross-site request forgery (CSRF)
- CVSS 7.5 HighCritical · CVSS 7+ and EPSS
Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection via 's' Parameter
- averta Depicter — Popup & Slider Builder
- SQL injection
- CVSS 6.4 Medium
Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.2.1- Authenticated (Author+) Stored Cross-Site Scripting
- averta Depicter — Popup & Slider Builder
- Cross-site scripting (XSS)
- CVSS 8.8 High
Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.1.1 - Authenticated (Contributor+) Arbitrary File Upload
- averta Depicter — Popup & Slider Builder
- Unrestricted file upload
- CVSS 6.5 Medium
Depicter <= 3.0.2 - Authenticated (Contributor+) Arbitrary Nonce Generation
- averta Depicter — Popup & Slider Builder
- Broken access control
- CVSS 4.3 Medium
Depicter Slider – Responsive Image Slider, Video Slider & Post Slider <= 2.0.6 - Cross-Site Request Forgery via save
- averta Depicter — Popup & Slider Builder
- Cross-site request forgery (CSRF)