Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Depicter — Popup & Slider Builder — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in Depicter — Popup & Slider Builder, with AI-generated Chinese analysis, references, and POCs.

Vendor: averta

CVE IDTitleCVSSSeverityPublished
CVE-2025-11370 Depicter <= 4.0.7 - Missing Authorization to Unauthenticated Display Rule Updates CWE-862 5.3 Medium2026-01-06
CVE-2025-11373 Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Safe File Type Upload CWE-862 4.3 Medium2025-11-05
CVE-2025-8383 Depicter <= 4.0.4 - Cross-Site Request Forgery CWE-352 4.3 Medium2025-10-31
CVE-2025-2011 Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection via 's' Parameter CWE-89 7.5 High2025-05-06
CVE-2024-4633 Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.2.1- Authenticated (Author+) Stored Cross-Site Scripting CWE-79 6.4 Medium2024-12-06
CVE-2024-4389 Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.1.1 - Authenticated (Contributor+) Arbitrary File Upload CWE-434 8.8 High2024-08-14
CVE-2024-4390 Depicter <= 3.0.2 - Authenticated (Contributor+) Arbitrary Nonce Generation CWE-863 6.5 Medium2024-06-20
CVE-2023-6493 Depicter Slider – Responsive Image Slider, Video Slider & Post Slider <= 2.0.6 - Cross-Site Request Forgery via save CWE-352 4.3 Medium2024-01-05

All 8 known CVE vulnerabilities affecting Depicter — Popup & Slider Builder with full Chinese analysis, references, and POCs where available.