WordPress security by component
Slider Revolution
Plugin description
Slider Revolution is a WordPress component with 14 published CVE records in this archive. The latest tracked vulnerability was published Jun 09, 2026; the highest CVE/CNA score is 8.8.
Plugin slug:
slider-revolutionLatest vulnerability
CVE-2026-7542: Slider Revolution: Sensitive information exposure
Slider Revolution is affected by sensitive information exposure. Exploitation requires at least subscriber-level access. Successful exploitation can disclose data that should not be available to the caller. The published affected range is 7.0 through 7.0.10.
| Safe version |
|
||
|---|---|---|---|
| Jun 09, 2026 |
CVE-2026-7542
Slider Revolution: Sensitive information exposure
Slider Revolution is affected by sensitive information exposure. Exploitation requires at least subscriber-level access. Successful exploitation can disclose data that should not be available to the caller. The published affected range is 7.0 through 7.0.10.
|
> 7.0.10 |
CVE6.5
NVDPending
|
| Jun 02, 2026 |
CVE-2026-9050
Slider Revolution: A security weakness
Slider Revolution is affected by a security weakness. Exploitation requires at least contributor-level access. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is 6.0.0 through 6.7.55, 7.0.0 through 7.0.14.
|
> 6.7.55, > 7.0.14 |
CVE4.3
NVDPending
|
| Jun 02, 2026 |
CVE-2026-9048
Slider Revolution: Sensitive information exposure
Slider Revolution is affected by sensitive information exposure. Exploitation requires at least contributor-level access. Successful exploitation can disclose data that should not be available to the caller. The published affected range is 7.0.0 through 7.0.14.
|
> 7.0.14 |
CVE4.3
NVDPending
|
| May 20, 2026 |
CVE-2026-6728
Slider Revolution: Sensitive information exposure
Slider Revolution is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller. The published affected range is 6.0 through 6.7.54, 7.0 through 7.0.9.
|
> 6.7.54, > 7.0.9 |
CVE5.3
NVDPending
|
| May 07, 2026 |
CVE-2026-6692
Slider Revolution: Dangerous file upload
Slider Revolution is affected by dangerous file upload. Exploitation requires at least subscriber-level access. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise. The published affected range is 7.0.0 through 7.0.10.
|
> 7.0.10 |
CVE8.8
NVDPending
|
| Oct 09, 2025 |
CVE-2025-10249
Slider Revolution: A security weakness
Slider Revolution is affected by a security weakness. Exploitation requires at least contributor-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Aug 29, 2025 |
CVE-2025-9217
Slider Revolution: Filesystem traversal
Slider Revolution is affected by filesystem traversal. Exploitation requires at least contributor-level access. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Oct 01, 2024 |
CVE-2024-8107
Slider Revolution: Cross-site scripting
Slider Revolution is affected by cross-site scripting. Exploitation requires at least author-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVD5.4
|
| Jun 04, 2024 |
CVE-2024-4637
Slider Revolution: Cross-site scripting
Slider Revolution is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVD5.4
|
| Jun 04, 2024 |
CVE-2024-4581
Slider Revolution: Cross-site scripting
Slider Revolution is affected by cross-site scripting. Exploitation requires at least author-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVD5.4
|
| May 02, 2024 |
CVE-2024-4092
Slider Revolution: Cross-site scripting
Slider Revolution is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVD5.4
|
| Jan 08, 2024 |
CVE-2023-6528
Slider Revolution: Code execution
Slider Revolution is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
|
See mitigation notes |
CVE8.8
NVD8.8
|
| Jun 19, 2023 |
CVE-2023-2359
Slider Revolution: Dangerous file upload
Slider Revolution is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
|
See mitigation notes |
CVE8.8
NVD8.8
|
| Jun 30, 2015 |
CVE-2015-5151
Slider Revolution: Cross-site scripting
Slider Revolution is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE4.3
NVD4.3
|