Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Revolution Slider — Vulnerabilities & Security Advisories 12

Browse all 12 CVE security advisories affecting Revolution Slider. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Revolution Slider serves as a WordPress plugin for creating responsive sliders and carousels on websites. Historically, it has been vulnerable to multiple security issues including remote code execution, cross-site scripting, and privilege escalation vulnerabilities. The plugin's 8 recorded CVEs highlight recurring problems related to insufficient input validation and improper access controls. Notable incidents include cases where attackers exploited these vulnerabilities to upload web shells, compromise websites, and distribute malware. Despite updates, the plugin's complex functionality continues to present security challenges, making it a frequent target in WordPress environments.

Found 12 results / 12 Clear Filters
Top products by Revolution Slider: Slider Revolution
CVE ID Title CVSS Severity Published
CVE-2026-7542 Slider Revolution 7.0 - 7.0.10 - Authenticated (Subscriber+) Sensitive Information Disclosure — Slider Revolution CWE-200 6.5 Medium 2026-06-09
CVE-2026-9048 Slider Revolution 7.0.0 - 7.0.14 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure — Slider Revolution CWE-863 4.3 Medium 2026-06-01
CVE-2026-9050 Slider Revolution 6.0.0-6.7.55 and 7.0.0-7.0.14 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin Deactivation — Slider Revolution CWE-862 4.3 Medium 2026-06-01
CVE-2026-6728 Slider Revolution <= 7.0.9 - Unauthenticated Sensitive Information Exposure via 'sliders/stream' — Slider Revolution CWE-200 5.3 Medium 2026-05-20
CVE-2026-6692 Slider Revolution 7.0.0 - 7.0.10 - Authenticated (Subscriber+) Arbitrary File Upload via _get_media_url — Slider Revolution CWE-434 8.8 High 2026-05-07
CVE-2025-10249 Slider Revolution <= 6.7.37 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Read — Slider Revolution CWE-23 6.5 Medium 2025-10-09
CVE-2025-9217 Slider Revolution <= 6.7.36 - Authenticated (Contributor+) Arbitrary File Read via 'used_svg' and 'used_images' — Slider Revolution CWE-22 6.5 Medium 2025-08-29
CVE-2024-8107 Slider Revolution <= 6.7.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload — Slider Revolution CWE-79 6.4 Medium 2024-10-01
CVE-2024-4637 Slider Revolution <= 6.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Elementor wrapperid and zindex — Slider Revolution CWE-79 6.4 Medium 2024-06-04
CVE-2024-4581 Slider Revolution <= 6.7.11 - Authenticated (Author+) Stored Cross-Site Scripting via Add Layer class, id, and title Attributes — Slider Revolution CWE-79 6.4 Medium 2024-06-04
CVE-2024-4092 Slider Revolution <= 6.7.7 - Authenticated (Author+) Stored Cross-Site Scripting via htmltag Parameter — Slider Revolution CWE-79 6.4 Medium 2024-05-02
CVE-2024-2306 Revslider <= 6.6.20 - Authenticated (Author+) Stored Cross-Site Scripting — Slider Revolution CWE-79 6.4 Medium 2024-04-09

This page lists every published CVE security advisory associated with Revolution Slider. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.