Themepunch vulnerabilities

Products

• Slider Revolution 14
• Essential Grid 2
• Showbiz Pro 2

Newest

• revolution slider slider revolution WordPress Slider Revolution plugin 7.0.0-7.0.16 - Cross Site Scripting (XSS) vulnerability CVE-2026-57678 7.1 HighJuly 2, 2026
• revolution slider slider revolution Slider Revolution <= 6.7.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CVE-2024-8107 6.4 MediumOctober 1, 2024
• revolution slider slider revolution WordPress Slider Revolution plugin <= 6.7.13 - Cross Site Scripting (XSS) vulnerability CVE-2024-37449 5.9 MediumJuly 21, 2024
• revolution slider slider revolution WordPress Slider Revolution plugin < 6.7.0 - Unauthenticated Broken Access Control vulnerability CVE-2024-34444 Public exploit 7.1 HighJune 19, 2024
• revolution slider slider revolution WordPress Slider Revolution plugin < 6.7.11 - Cross Site Scripting (XSS) vulnerability CVE-2024-34443 5.9 MediumJune 19, 2024
• themepunch essential grid WordPress Essential Grid plugin <= 3.0.18 - Multiple Authenticated Broken Access Control vulnerability CVE-2023-47771 8.3 HighJune 19, 2024
• revolution slider slider revolution Slider Revolution <= 6.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Elementor wrapperid and zindex CVE-2024-4637 6.4 MediumJune 4, 2024
• revolution slider slider revolution Slider Revolution <= 6.7.11 - Authenticated (Author+) Stored Cross-Site Scripting via Add Layer class, id, and title Attributes CVE-2024-4581 6.4 MediumJune 4, 2024
• revolution slider slider revolution Slider Revolution <= 6.7.7 - Authenticated (Author+) Stored Cross-Site Scripting via htmltag Parameter CVE-2024-4092 6.4 MediumMay 2, 2024
• themepunch essential grid gallery wordpress plugin Essential Grid <= 3.1.1 - Unauthenticated Private Post Disclosure CVE-2024-3235 5.3 MediumApril 10, 2024
• revolution slider slider revolution Slider Revolution < 6.6.19 - Author+ Insecure Deserialization leading to RCE CVE-2023-6528 8.8 HighJanuary 8, 2024
• revolution slider slider revolution WordPress Slider Revolution Plugin <= 6.6.15 is vulnerable to Arbitrary File Upload CVE-2023-47784 8.4 HighDecember 20, 2023
• revolution slider slider revolution WordPress Slider Revolution Plugin <= 6.6.14 is vulnerable to Cross Site Scripting (XSS) CVE-2023-47772 6.5 MediumNovember 20, 2023
• themepunch essential grid WordPress Essential Grid Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS) CVE-2023-47684 7.1 HighNovember 13, 2023
• revolution slider slider revolution Revolution Slider <= 6.6.12 - Author+ Remote Code Execution CVE-2023-2359 8.8 HighJune 19, 2023
• themepunch showbiz pro The Showbiz Pro plugin through 1.7.1 for WordPress has PHP code execution by uploading a .php... CVE-2015-9499 EPSS 16.3% 9.8 CriticalOctober 22, 2019
• themepunch slider revolution Cross-site scripting (XSS) vulnerability in the Slider Revolution (revslider) plugin 4.2.2 for... CVE-2015-5151 4.3 MediumJune 30, 2015
• themepunch showbiz pro, slider revolution +1 more The ThemePunch Slider Revolution (revslider) plugin before 3.0.96 for WordPress and Showbiz Pro... CVE-2014-9735 Public exploit EPSS 75.6% 7.5 HighJune 30, 2015
• themepunch slider revolution Directory traversal vulnerability in the Slider Revolution (revslider) plugin before 4.2 for... CVE-2014-9734 Public exploit EPSS 20.5% 5.0 MediumJune 30, 2015