Depicter — Popup & Slider Builder vulnerabilities

2 known vulnerabilities in Depicter — Popup & Slider Builder from Averta. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Depicter — Popup & Slider Builder: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-2011May 6, 2025AvertaEPSS 46.6%

  The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL Injection via the ‘s' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation

• 8.8 High severity

  Depicter — Popup & Slider Builder: Unrestricted Upload of File with Dangerous Type

  CVE-2024-4389Aug 14, 2024AvertaEPSS 1.02%

  The Slider and Carousel slider by Depicter plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadFile function in all versions up to, and including, 3.1.1. This makes it possible for authenticated attacke