Revolution Slider vulnerabilities

Products

• Slider Revolution 20

Newest

• revolution slider slider revolution WordPress Slider Revolution plugin 7.0.0-7.0.16 - Cross Site Scripting (XSS) vulnerability CVE-2026-57678 7.1 HighJuly 2, 2026
• revolution slider slider revolution Slider Revolution 7.0 - 7.0.10 - Authenticated (Subscriber+) Sensitive Information Disclosure CVE-2026-7542 6.5 MediumJune 9, 2026
• revolution slider slider revolution Slider Revolution 7.0.0 - 7.0.14 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure CVE-2026-9048 4.3 MediumJune 1, 2026
• revolution slider slider revolution Slider Revolution 6.0.0-6.7.55 and 7.0.0-7.0.14 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin Deactivation CVE-2026-9050 4.3 MediumJune 1, 2026
• revolution slider slider revolution Slider Revolution <= 7.0.9 - Unauthenticated Sensitive Information Exposure via 'sliders/stream' CVE-2026-6728 5.3 MediumMay 20, 2026
• revolution slider slider revolution Slider Revolution 7.0.0 - 7.0.10 - Authenticated (Subscriber+) Arbitrary File Upload via _get_media_url CVE-2026-6692 8.8 HighMay 7, 2026
• revolution slider slider revolution Slider Revolution <= 6.7.37 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Read CVE-2025-10249 6.5 MediumOctober 9, 2025
• revolution slider slider revolution Slider Revolution <= 6.7.36 - Authenticated (Contributor+) Arbitrary File Read via 'used_svg' and 'used_images' CVE-2025-9217 6.5 MediumAugust 29, 2025
• revolution slider slider revolution Slider Revolution <= 6.7.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CVE-2024-8107 6.4 MediumOctober 1, 2024
• revolution slider slider revolution WordPress Slider Revolution plugin <= 6.7.13 - Cross Site Scripting (XSS) vulnerability CVE-2024-37449 5.9 MediumJuly 21, 2024
• revolution slider slider revolution WordPress Slider Revolution plugin < 6.7.0 - Unauthenticated Broken Access Control vulnerability CVE-2024-34444 Public exploit 7.1 HighJune 19, 2024
• revolution slider slider revolution WordPress Slider Revolution plugin < 6.7.11 - Cross Site Scripting (XSS) vulnerability CVE-2024-34443 5.9 MediumJune 19, 2024
• revolution slider slider revolution Slider Revolution <= 6.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Elementor wrapperid and zindex CVE-2024-4637 6.4 MediumJune 4, 2024
• revolution slider slider revolution Slider Revolution <= 6.7.11 - Authenticated (Author+) Stored Cross-Site Scripting via Add Layer class, id, and title Attributes CVE-2024-4581 6.4 MediumJune 4, 2024
• revolution slider slider revolution Slider Revolution <= 6.7.7 - Authenticated (Author+) Stored Cross-Site Scripting via htmltag Parameter CVE-2024-4092 6.4 MediumMay 2, 2024
• revolution slider slider revolution Revslider <= 6.6.20 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2024-2306 6.4 MediumApril 9, 2024
• revolution slider slider revolution Slider Revolution < 6.6.19 - Author+ Insecure Deserialization leading to RCE CVE-2023-6528 8.8 HighJanuary 8, 2024
• revolution slider slider revolution WordPress Slider Revolution Plugin <= 6.6.15 is vulnerable to Arbitrary File Upload CVE-2023-47784 8.4 HighDecember 20, 2023
• revolution slider slider revolution WordPress Slider Revolution Plugin <= 6.6.14 is vulnerable to Cross Site Scripting (XSS) CVE-2023-47772 6.5 MediumNovember 20, 2023
• revolution slider slider revolution Revolution Slider <= 6.6.12 - Author+ Remote Code Execution CVE-2023-2359 8.8 HighJune 19, 2023