PatchTheCVEslider revolution vulnerabilities and fixes
Recent CVEs affecting slider revolution, with upgrade or downgrade steps. 9 tracked.
Also searched as: sliderrevolution.
slider revolution has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 9. Most recent: 2024-10-01. Highest priority: CVE-2023-2359 (score 57/100).
- CVE-2024-8107 MEDIUM 6.4 UPGRADE The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads i
- CVE-2024-4092 MEDIUM 6.4 UPGRADE The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘htmltag’ para
- CVE-2024-37449 MEDIUM 5.9 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in T
- CVE-2024-34444 HIGH 7.1 UPGRADE Missing Authorization vulnerability in ThemePunch OHG Slider Revolution.This issue affects Slider Revolution:
- CVE-2024-34443 MEDIUM 5.9 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in T
- CVE-2023-6528 HIGH 8.8 UPGRADE The Slider Revolution WordPress plugin before 6.6.19 does not prevent users with at least the Author role from
- CVE-2023-47784 HIGH 8.4 UPGRADE Unrestricted Upload of File with Dangerous Type vulnerability in ThemePunch OHG Slider Revolution.This issue a
- CVE-2023-47772 MEDIUM 6.5 UPGRADE Contributor+ Stored Cross-Site Scripting (XSS) vulnerability in Slider Revolution <= 6.6.14.
- CVE-2023-2359 HIGH 8.8 UPGRADE The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leadin
FAQ
How do I fix slider revolution vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is slider revolution being exploited right now?
None of the tracked slider revolution CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which slider revolution CVE should I patch first?
CVE-2023-2359 currently ranks highest (57/100): The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leadin.