CVE-2024-4390
Medium
Description
The Slider and Carousel slider by Depicter plugin for WordPress is vulnerable to Arbitrary Nonce Generation in all versions up to, and including, 3.0.2. This makes it possible for authenticated attackers with contributor access and above, to generate a valid nonce for any WordPress action/function. This could be used to invoke functionality that is protected only by nonce checks.
SeverityMedium
CVSS6.5
Exploit probability—
ProductDepicter
PublishedJun 20, 2024
First seenJun 20, 2024
Weakness typeCWE-863Incorrect authorization
How to fix
Update
- depicter depicter3.1.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| depicter depicter | v < 3.1.0 | 3.1.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.