Popup and Slider Builder by Depicter Arbitrary File Upload Vulnerability

A vulnerability allowing arbitrary file uploads has been identified in the Popup and Slider Builder by Depicter WordPress plugin, in versions through 4.0.4. This issue arises from inadequate capability checks in the 'depicter-media-upload' AJAX route, which enables authenticated attackers with Contributor-level access and above to upload certain file types to the server.

Impact

Exploitation of this vulnerability could lead to unauthorized file uploads on the affected server.

Remediation

Users are advised to update the plugin to version 4.0.5 or a later patched version.