Unknown Slider Revolution vulnerabilities
2 vulnerabilities
Known vulnerabilities in Unknown Slider Revolution, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2023-6528unknown · slider revolution +2 moreSlider Revolution < 6.6.19 - Author+ Insecure Deserialization leading to RCEThe Slider Revolution WordPress plugin before 6.6.19 does not prevent users with at least the Author role from unserializing arbitrary content when importing sliders, potentially leading to Remote Code Execution.CVSS8.8HighEPSS1.37%PrioritiseCVE-2023-2359unknown · slider revolution +2 moreRevolution Slider <= 6.6.12 - Author+ Remote Code ExecutionThe Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations.CVSS8.8HighEPSS2.54%