Skip to contentRevolution Slider Slider Revolution vulnerabilities
- revolution slider slider revolutionWordPress Slider Revolution plugin 7.0.0-7.0.16 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-576787.1 High
- revolution slider slider revolutionSlider Revolution 7.0 - 7.0.10 - Authenticated (Subscriber+) Sensitive Information DisclosureCVE-2026-75426.5 Medium
- revolution slider slider revolutionSlider Revolution 7.0.0 - 7.0.14 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information ExposureCVE-2026-90484.3 Medium
- revolution slider slider revolutionSlider Revolution 6.0.0-6.7.55 and 7.0.0-7.0.14 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin DeactivationCVE-2026-90504.3 Medium
- revolution slider slider revolutionSlider Revolution <= 7.0.9 - Unauthenticated Sensitive Information Exposure via 'sliders/stream'CVE-2026-67285.3 Medium
- revolution slider slider revolutionSlider Revolution 7.0.0 - 7.0.10 - Authenticated (Subscriber+) Arbitrary File Upload via _get_media_urlCVE-2026-66928.8 High
- revolution slider slider revolutionSlider Revolution <= 6.7.37 - Missing Authorization to Authenticated (Contributor+) Arbitrary File ReadCVE-2025-102496.5 Medium
- revolution slider slider revolutionSlider Revolution <= 6.7.36 - Authenticated (Contributor+) Arbitrary File Read via 'used_svg' and 'used_images'CVE-2025-92176.5 Medium
- revolution slider slider revolutionSlider Revolution <= 6.7.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadCVE-2024-81076.4 Medium
- revolution slider slider revolutionWordPress Slider Revolution plugin <= 6.7.13 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-374495.9 Medium
- revolution slider slider revolutionWordPress Slider Revolution plugin < 6.7.0 - Unauthenticated Broken Access Control vulnerabilityCVE-2024-34444Public exploit7.1 High
- revolution slider slider revolutionWordPress Slider Revolution plugin < 6.7.11 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-344435.9 Medium
- revolution slider slider revolutionSlider Revolution <= 6.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Elementor wrapperid and zindexCVE-2024-46376.4 Medium
- revolution slider slider revolutionSlider Revolution <= 6.7.11 - Authenticated (Author+) Stored Cross-Site Scripting via Add Layer class, id, and title AttributesCVE-2024-45816.4 Medium
- revolution slider slider revolutionSlider Revolution <= 6.7.7 - Authenticated (Author+) Stored Cross-Site Scripting via htmltag ParameterCVE-2024-40926.4 Medium
- revolution slider slider revolutionRevslider <= 6.6.20 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2024-23066.4 Medium
- revolution slider slider revolutionSlider Revolution < 6.6.19 - Author+ Insecure Deserialization leading to RCECVE-2023-65288.8 High
- revolution slider slider revolutionWordPress Slider Revolution Plugin <= 6.6.15 is vulnerable to Arbitrary File UploadCVE-2023-477848.4 High
- revolution slider slider revolutionWordPress Slider Revolution Plugin <= 6.6.14 is vulnerable to Cross Site Scripting (XSS)CVE-2023-477726.5 Medium
- revolution slider slider revolutionRevolution Slider <= 6.6.12 - Author+ Remote Code ExecutionCVE-2023-23598.8 High