WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
revolution_video_player
Published
2025-07-16
Title
Revolution Video Player With Bottom Playlist < 2.9.3 - Reflected Cross-Site Scripting
Slug
revslider
Published
2015-02-11
Title
WordPress Slider Revolution - Local File Disclosure
Slug
revslider
Published
2014-11-30
Title
WordPress Slider Revolution Shell Upload
Slug
revslider
Published
2023-05-22
Title
Revolution Slider <= 6.6.12 - Author+ Remote Code Execution
Slug
revslider
Published
2023-11-14
Title
Slider Revolution < 6.6.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
revslider
Published
2023-11-14
Title
Slider Revolution < 6.6.16 - Authenticated (Author+) Arbitrary File Upload
Slug
revslider
Published
2023-11-30
Title
Slider Revolution < 6.6.19 - Author+ Insecure Deserialization leading to RCE
Slug
revslider
Published
2024-04-08
Title
Revslider < 6.7.0 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
revslider
Published
2024-04-30
Title
Slider Revolution < 6.7.8 - Authenticated (Author+) Stored Cross-Site Scripting via htmltag Parameter
Slug
revslider
Published
2024-06-03
Title
Slider Revolution < 6.7.11 - Authenticated (Author+) Stored Cross-Site Scripting via Add Layer class, id, and title Attributes
Slug
revslider
Published
2024-06-03
Title
Slider Revolution < 6.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Elementor wrapperid and zindex
Slug
revslider
Published
2024-05-28
Title
Slider Revolution < 6.7.0 - Missing Authorization
Slug
revslider
Published
2024-05-28
Title
Slider Revolution < 6.7.11 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
revslider
Published
2024-06-28
Title
Slider Revolution < 6.7.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
revslider
Published
2024-09-30
Title
Slider Revolution < 6.7.19 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
revslider
Published
2025-08-28
Title
Slider Revolution < 6.7.37 - Authenticated (Contributor+) Arbitrary File Read via 'used_svg' and 'used_images'
Slug
revslider
Published
2025-10-08
Title
Slider Revolution < 6.7.38 - Contributor+ Arbitrary File Read
Slug
revslider
Published
2026-05-06
Title
Slider Revolution 7.0.0 - 7.0.10 - Subscriber+ Arbitrary File Upload via _get_media_url
Slug
revslider
Published
2026-05-19
Title
Slider Revolution < 7.0.10 - Unauthenticated Sensitive Information Exposure via 'sliders/stream'
Slug
revslider
Published
2026-06-01
Title
Slider Revolution 6.0.0-6.7.55 and 7.0.0-7.0.14 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin Deactivation
Slug
revslider
Published
2026-06-01
Title
Slider Revolution 7.0.0 - 7.0.14 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure
Slug
revslider
Published
2026-06-08
Title
Slider Revolution 7.0 - 7.0.10 - Authenticated (Subscriber+) Sensitive Information Disclosure
Slug
revslider
Published
2026-06-30
Title
Slider Revolution 7.0.0-7.0.16 - Unauthenticated Stored Cross-Site Scripting
Slug
revy
Published
2024-12-02
Title
Revy <= 1.18 - Unauthenticated SQL Injection
Slug
revy
Published
2024-12-02
Title
Revy <= 1.18 - Unauthenticated Arbitrary File Upload