Plugin icon

Slider Revolution

revslider

Vulnerabilities:

16

Last Updated:

July 4, 2025

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2025-10-08
Title
Slider Revolution < 6.7.38 - Contributor+ Arbitrary File Read
Fixed in
Fixed in 6.7.38
CVSS
6.8 (medium)
Published
2025-08-28
Title
Slider Revolution < 6.7.37 - Authenticated (Contributor+) Arbitrary File Read via 'used_svg' and 'used_images'
Fixed in
Fixed in 6.7.37
CVSS
6.5 (medium)
Published
2024-09-30
Title
Slider Revolution < 6.7.19 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Fixed in
Fixed in 6.7.19
CVSS
6.4 (medium)
Published
2024-06-28
Title
Slider Revolution < 6.7.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 6.7.14
CVSS
4.4 (medium)
Published
2024-06-03
Title
Slider Revolution < 6.7.11 - Authenticated (Author+) Stored Cross-Site Scripting via Add Layer class, id, and title Attributes
Fixed in
Fixed in 6.7.11
CVSS
6.4 (medium)
Published
2024-06-03
Title
Slider Revolution < 6.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Elementor wrapperid and zindex
Fixed in
Fixed in 6.7.11
CVSS
6.4 (medium)
Published
2024-05-28
Title
Slider Revolution < 6.7.0 - Missing Authorization
Fixed in
Fixed in 6.7.0
CVSS
6.4 (medium)
Published
2024-05-28
Title
Slider Revolution < 6.7.11 - Authenticated (Author+) Stored Cross-Site Scripting
Fixed in
Fixed in 6.7.11
CVSS
6.4 (medium)
Published
2024-04-30
Title
Slider Revolution < 6.7.8 - Authenticated (Author+) Stored Cross-Site Scripting via htmltag Parameter
Fixed in
Fixed in 6.7.8
CVSS
6.4 (medium)
Published
2024-04-08
Title
Revslider < 6.7.0 - Authenticated (Author+) Stored Cross-Site Scripting
Fixed in
Fixed in 6.7.0
CVSS
6.4 (medium)
Published
2023-11-30
Title
Slider Revolution < 6.6.19 - Author+ Insecure Deserialization leading to RCE
Fixed in
Fixed in 6.6.19
CVSS
8.0 (high)
Published
2023-11-14
Title
Slider Revolution < 6.6.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 6.6.15
CVSS
6.4 (medium)
Published
2023-11-14
Title
Slider Revolution < 6.6.16 - Authenticated (Author+) Arbitrary File Upload
Fixed in
Fixed in 6.6.16
CVSS
7.2 (high)
Published
2023-05-22
Title
Revolution Slider <= 6.6.12 - Author+ Remote Code Execution
Fixed in
Fixed in 6.6.13
CVSS
6.6 (medium)
Published
2015-02-11
Title
WordPress Slider Revolution - Local File Disclosure
Fixed in
Fixed in 4.1.5
CVSS
7.5 (high)
Published
2014-11-30
Title
WordPress Slider Revolution Shell Upload
Fixed in
Fixed in 3.0.96
CVSS
9.4 (critical)