Slider Revolution vulnerabilities
We track 2 vulnerabilities in Slider Revolution products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 8, 2024.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest Slider Revolution vulnerabilities
- 8.8 High severity
Slider Revolution: Deserialization of Untrusted Data
The Slider Revolution WordPress plugin before 6.6.19 does not prevent users with at least the Author role from unserializing arbitrary content when importing sliders, potentially leading to Remote Code Execution.
- 8.8 High severity
Slider Revolution: Improper Control of Generation of Code
The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations.