The averta Depicter Slider plugin suffers from a missing authorization vulnerability that permits exploitation of incorrectly configured access control security levels. This affects all versions up to 4.0.4. The vulnerability is remotely exploitable without privileges or user interaction, impacting confidentiality and integrity but not availability. The CVSS vector is AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, and low impact on confidentiality and integrity.

Successful exploitation could lead to unauthorized access to certain functionalities or data within the Depicter Slider plugin, potentially exposing or modifying information without proper authorization. There is no indication of impact on system availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected plugin or disabling it if feasible to reduce exposure. Monitor vendor channels for updates regarding patches or official mitigations.