High
CVE-2026-15049
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 16
Reset filters
High
CVE-2026-66622
Depicter — Popup & Slider Builder <= 4.8.0 - Unauthenticated SQL Injection
Medium
CVE-2025-11370
Depicter <= 4.0.7 - Missing Authorization to Unauthenticated Display Rule Updates
Medium
CVE-2025-68558
Depicter Slider <= 4.0.4 - Missing Authorization
Medium
CVE-2025-11373
Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Safe File Type Upload
Medium
CVE-2025-8383
Depicter <= 4.0.4 - Cross-Site Request Forgery
High
CVE-2025-2011
Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection via 's' Parameter
Medium
CVE-2024-4633
Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.2.1- Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-47381
Depicter Slider <= 3.2.2 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-47359
Depicter Slider <= 3.2.2 - Missing Authorization
High
CVE-2024-4389
Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.1.1 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2024-43161
Depicter Slider <= 3.1.2 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-37414
Depicter Slider <= 3.0.2 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-4390
Depicter <= 3.0.2 - Authenticated (Contributor+) Arbitrary Nonce Generation
Medium
CVE-2023-6493
Depicter Slider – Responsive Image Slider, Video Slider & Post Slider <= 2.0.6 - Cross-Site Request Forgery via save
Medium
CVE-2022-47176
Depicter Slider <= 1.9.0 - Missing Authorization on 'make' function
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.