Revolution Slider Slider Revolution
12 CVEs affecting Revolution Slider Slider Revolution. Latest disclosed: 2026-06-09. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-6692 | High | 8.8 | 2026-05-07 | The Slider Revolution plugin for WordPress is vulnerable to Arbitrary File Upload in versions 7.0.0 to 7.0.10 via the '_get_media_url' and '_check_file_path' f… |
CVE-2026-7542 | Medium | 6.5 | 2026-06-09 | The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions 7.0 to 7.0.10. This is due to three compounding design… |
CVE-2025-10249 | Medium | 6.5 | 2025-10-09 | The Slider Revolution plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on several functions… |
CVE-2025-9217 | Medium | 6.5 | 2025-08-29 | The Slider Revolution plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.7.36 via the 'used_svg' and 'used_images' pa… |
CVE-2024-8107 | Medium | 6.4 | 2024-10-01 | The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.7.18 due t… |
CVE-2024-4637 | Medium | 6.4 | 2024-06-04 | The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 6.7.10 due to insufficient input… |
CVE-2024-4581 | Medium | 6.4 | 2024-06-04 | The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Add Layer widget in all versions up to, and including… |
CVE-2024-4092 | Medium | 6.4 | 2024-05-02 | The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘htmltag’ parameter in all versions up to, and including, 6.7.7… |
CVE-2024-2306 | Medium | 6.4 | 2024-04-09 | The Revslider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via svg upload in all versions up to, and including, 6.6.20 due to insufficient… |
CVE-2026-6728 | Medium | 5.3 | 2026-05-20 | The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 7.0.9 via the 'get_stream_data()'… |
CVE-2026-9050 | Medium | 4.3 | 2026-06-02 | The Slider Revolution plugin for WordPress in versions 6.0.0-6.7.55 and 7.0.0-7.0.14 is vulnerable to unauthorized modification of data. This is due to the plu… |
CVE-2026-9048 | Medium | 4.3 | 2026-06-02 | The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 7.0.0 - 7.0.14, via the 'slider.get.full' AJAX Action. T… |