CVE-2024-47359

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-47359
Cross-Site Request Forgery (CSRF) vulnerability in averta Depicter Slider depicter.This issue affects Depicter Slider: from n/a through <= 3.2.2.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://patchstack.com/database/Wordpress/Plugin/depicter/vulnerability/wordpress-depicter-plugin-3-2-2-broken-access-control-vulnerability?_s_id=cve
Configurations

Configuration 1 (hide)

cpe:2.3:a:depicter:depicter:*:*:*:*:*:wordpress:*:*
History

01 Apr 2026, 16:18

Type Values Removed Values Added
Summary (en) Missing Authorization vulnerability in Depicter Slider and Popup by Averta Depicter Slider allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Depicter Slider: from n/a through 3.2.2. (en) Cross-Site Request Forgery (CSRF) vulnerability in averta Depicter Slider depicter.This issue affects Depicter Slider: from n/a through <= 3.2.2.
References
  • {'url': 'https://patchstack.com/database/vulnerability/depicter/wordpress-depicter-plugin-3-2-2-broken-access-control-vulnerability?_s_id=cve', 'tags': ['Third Party Advisory'], 'source': 'audit@patchstack.com'}
  • () https://patchstack.com/database/Wordpress/Plugin/depicter/vulnerability/wordpress-depicter-plugin-3-2-2-broken-access-control-vulnerability?_s_id=cve -
CWE CWE-862 CWE-352

12 Nov 2024, 20:26

Type Values Removed Values Added
First Time Depicter depicter
Depicter
References () https://patchstack.com/database/vulnerability/depicter/wordpress-depicter-plugin-3-2-2-broken-access-control-vulnerability?_s_id=cve - () https://patchstack.com/database/vulnerability/depicter/wordpress-depicter-plugin-3-2-2-broken-access-control-vulnerability?_s_id=cve - Third Party Advisory
Summary
  • (es) Vulnerabilidad de autorización faltante en Depicter Slider y Popup de Averta Depicter Slider permite acceder a funcionalidades que no están correctamente restringidas por las ACL. Este problema afecta a Depicter Slider: desde n/a hasta 3.2.2.
CVSS v2 : unknown
v3 : 5.3 		v2 : unknown
v3 : 9.8
CPE cpe:2.3:a:depicter:depicter:*:*:*:*:*:wordpress:*:*

01 Nov 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-01 15:15

Updated : 2026-04-01 16:18

NVD link : CVE-2024-47359

Mitre link : CVE-2024-47359

CVE.ORG link : CVE-2024-47359

JSON object : View

Products Affected

depicter

  • depicter
CWE
CWE-352

Cross-Site Request Forgery (CSRF)