CVE-2024-4390: Depicter <= 3.0.2 - Authenticated (Contributor+) Arbitrary Nonce Generation
First published: Thu Jun 20 2024(Updated: )
The Slider and Carousel slider by Depicter plugin for WordPress is vulnerable to Arbitrary Nonce Generation in all versions up to, and including, 3.0.2. This makes it possible for authenticated attackers with contributor access and above, to generate a valid nonce for any WordPress action/function. This could be used to invoke functionality that is protected only by nonce checks.
Credit: security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Depicter | <3.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.wordfence.com/threat-intel/vulnerabilities/id/dd7c3a5d-b8aa-45cb-983c-55ba7e3d72f3?source=cve
- https://plugins.trac.wordpress.org/browser/depicter/trunk/app/src/Controllers/Ajax/SecurityAjaxController.php#L14
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3103357%40depicter%2Ftrunk&old=3090538%40depicter%2Ftrunk&sfp_email=&sfph_mail=
Frequently Asked Questions
What is the severity of CVE-2024-4390?
CVE-2024-4390 has a medium severity rating as it allows authenticated attackers to generate valid nonces.
How do I fix CVE-2024-4390?
To fix CVE-2024-4390, update the Depicter plugin to version 3.1.0 or higher.
Who is affected by CVE-2024-4390?
CVE-2024-4390 affects all versions of the Depicter plugin for WordPress up to and including 3.0.2.
What types of attackers can exploit CVE-2024-4390?
Only authenticated attackers with contributor access or higher can exploit CVE-2024-4390.
What does CVE-2024-4390 allow an attacker to do?
CVE-2024-4390 allows an authenticated attacker to generate a valid nonce for any WordPress action.
- agent/title
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/severity
- agent/author
- agent/event
- agent/weakness
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/depicter
- canonical/depicter