Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel 3.1.1

  • Severity: high-risk
  • Status: Fixed
  • Publication: August 13, 2024

The Slider and Carousel slider plugin for WordPress, created by Depicter, has a security issue that allows for unauthorized files to be uploaded. This can potentially allow hackers with contributor access or higher to upload harmful files onto the website’s server, which could lead to remote code execution.

Detected in:

Depicter — Popup & Slider Builder fixed vulnerable versions:
Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel fixed vulnerable versions:
Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.