Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:slider_revolution:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductSlider Revolution (ada745fc-ed24-5251-b176-ed1ea5551873)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6528 vulnerable 2026-06-08 06:19:47.550740 Slider Revolution < 6.6.19 - Author+ Insecure Deserialization leading to RCE
The Slider Revolution WordPress plugin before 6.6.19 does not prevent users with at least the Author role from unserializing arbitrary content when importing sliders, potentially leading to Remote Code Execution.
Published: 2024-01-08T19:00:34.654Z
Updated: 2025-06-03T14:34:40.468Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2359 vulnerable 2026-06-08 06:02:42.134199 Revolution Slider <= 6.6.12 - Author+ Remote Code Execution
The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations.
Published: 2023-06-19T10:52:49.053Z
Updated: 2024-12-12T16:30:04.451Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.