Themepunch Slider_revolution
14 CVEs affecting Themepunch Slider_revolution. Latest disclosed: 2024-10-01. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-6528 | High | 8.8 | 2024-01-08 | The Slider Revolution WordPress plugin before 6.6.19 does not prevent users with at least the Author role from unserializing arbitrary content when importing s… |
CVE-2023-2359 | High | 8.8 | 2023-06-19 | The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escala… |
CVE-2023-47784 | High | 8.4 | 2023-12-20 | Unrestricted Upload of File with Dangerous Type vulnerability in ThemePunch OHG Slider Revolution.This issue affects Slider Revolution: from n/a through 6.6.15. |
CVE-2024-34444 | High | 7.1 | 2024-06-19 | Missing Authorization vulnerability in ThemePunch OHG Slider Revolution.This issue affects Slider Revolution: from n/a before 6.7.0. |
CVE-2023-47772 | Medium | 6.5 | 2023-11-20 | Contributor+ Stored Cross-Site Scripting (XSS) vulnerability in Slider Revolution <= 6.6.14. |
CVE-2024-8107 | Medium | 6.4 | 2024-10-01 | The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.7.18 due t… |
CVE-2024-4637 | Medium | 6.4 | 2024-06-04 | The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 6.7.10 due to insufficient input… |
CVE-2024-4581 | Medium | 6.4 | 2024-06-04 | The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Add Layer widget in all versions up to, and including… |
CVE-2024-4092 | Medium | 6.4 | 2024-05-02 | The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘htmltag’ parameter in all versions up to, and including, 6.7.7… |
CVE-2024-37449 | Medium | 5.9 | 2024-07-21 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemePunch OHG Slider Revolution.This issue affect… |
CVE-2024-34443 | Medium | 5.9 | 2024-06-19 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemePunch OHG Slider Revolution allows Stored XSS… |
CVE-2015-5151 | | 2015-06-30 | Cross-site scripting (XSS) vulnerability in the Slider Revolution (revslider) plugin 4.2.2 for WordPress allows remote attackers to inject arbitrary web script… | |
CVE-2014-9735 | | 2015-06-30 | The ThemePunch Slider Revolution (revslider) plugin before 3.0.96 for WordPress and Showbiz Pro plugin 1.7.1 and earlier for Wordpress does not properly restri… | |
CVE-2014-9734 | | 2015-06-30 | Directory traversal vulnerability in the Slider Revolution (revslider) plugin before 4.2 for WordPress allows remote attackers to read arbitrary files via a… |