Beta

Report

Slider Revolution <= 6.6.15 is vulnerable to Author+ Arbitrary File Upload vulnerability

Author
Published
2023-11-13

The Slider Revolution plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 6.6.15. This makes it possible for attackers with author-level access and higher to upload arbitrary files on the affected site's server which may make remote code execution possible.

CVSS

Score:8.4

Severity:High

Version: 6.6.15

There is a patch available in v6.6.16 and we strongly recommend you update to this version as soon as possible.