4.3
Moyenne
CVE-2025-11373 The Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel…
Description
The Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability checks in the "depicter-media-upload" AJAX route in all versions up to, and including, 4.0.4. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload limited files on the affected site's server.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel 4.0 | premières → 4.0.4 | Pas de correctif indiqué |
| Depicter — Popup & Slider Builder 4.0 | premières → 4.0.4 | Pas de correctif indiqué |