Depicter — Popup & Slider Builder — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in Depicter — Popup & Slider Builder, with AI-generated Chinese analysis, references, and POCs.

Vendor: averta

CVE ID	Title	CVSS	Severity	Published
CVE-2026-15049	Depicter < 4.8.0 - Editor+ Arbitrary File Upload via ZIP Import	-	-	2026-08-20
CVE-2025-11370	Depicter <= 4.0.7 - Missing Authorization to Unauthenticated Display Rule Updates CWE-862	5.3	Medium	2026-01-06
CVE-2025-11373	Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Safe File Type Upload CWE-862	4.3	Medium	2025-11-05
CVE-2025-8383	Depicter <= 4.0.4 - Cross-Site Request Forgery CWE-352	4.3	Medium	2025-10-31
CVE-2025-2011	Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection via 's' Parameter CWE-89	7.5	High	2025-05-06
CVE-2024-4633	Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.2.1- Authenticated (Author+) Stored Cross-Site Scripting CWE-79	6.4	Medium	2024-12-06
CVE-2024-4389	Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.1.1 - Authenticated (Contributor+) Arbitrary File Upload CWE-434	8.8	High	2024-08-14
CVE-2024-4390	Depicter <= 3.0.2 - Authenticated (Contributor+) Arbitrary Nonce Generation CWE-863	6.5	Medium	2024-06-20
CVE-2023-6493	Depicter Slider – Responsive Image Slider, Video Slider & Post Slider <= 2.0.6 - Cross-Site Request Forgery via save CWE-352	4.3	Medium	2024-01-05

All 9 known CVE vulnerabilities affecting Depicter — Popup & Slider Builder with full Chinese analysis, references, and POCs where available.