Skip to content
Sign in
8.8 High

CVE-2023-6528 The Slider Revolution WordPress plugin before 6.6.19 does not prevent users with at least the Author role from…

Description

The Slider Revolution WordPress plugin before 6.6.19 does not prevent users with at least the Author role from unserializing arbitrary content when importing sliders, potentially leading to Remote Code Execution.

Affected products and versions

Product Affected versions Fixed in
Slider Revolution 6.6 earliest → < 6.6.19 6.6.19

Other CVEs of Slider Revolution

The 2 CVEs of Slider Revolution →
CVE-2023-2359 The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an… Not rated
Track this CVE