What’s Vulnerable › Products
Revolution Slider Slider Revolution vulnerabilities
23 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.
Check whether your Revolution Slider Slider Revolution version is affected
Latest Revolution Slider Slider Revolution vulnerabilities
- CVE-2026-57678 — WordPress Slider Revolution plugin 7.0.0-7.0.16 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-7542 — Slider Revolution 7.0 - 7.0.10 - Authenticated (Subscriber+) Sensitive Information Disclosure (CVSS 6.5)
- CVE-2026-9050 — Slider Revolution 6.0.0-6.7.55 and 7.0.0-7.0.14 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin Deactivation (CVSS 4.3)
- CVE-2026-9048 — Slider Revolution 7.0.0 - 7.0.14 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure (CVSS 4.3)
- CVE-2026-6728 — Slider Revolution <= 7.0.9 - Unauthenticated Sensitive Information Exposure via 'sliders/stream' (CVSS 5.3)
- CVE-2026-6692 — Slider Revolution 7.0.0 - 7.0.10 - Authenticated (Subscriber+) Arbitrary File Upload via _get_media_url (CVSS 8.8)
- CVE-2025-10249 — Slider Revolution <= 6.7.37 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Read (CVSS 6.5)
- CVE-2025-9217 — Slider Revolution <= 6.7.36 - Authenticated (Contributor+) Arbitrary File Read via 'used_svg' and 'used_images' (CVSS 6.5)
- CVE-2024-8107 — Slider Revolution <= 6.7.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload (CVSS 5.4)
- CVE-2024-37449 — WordPress Slider Revolution plugin <= 6.7.13 - Cross Site Scripting (XSS) vulnerability (CVSS 4.8)
- CVE-2024-34444 — WordPress Slider Revolution plugin < 6.7.0 - Unauthenticated Broken Access Control vulnerability (CVSS 8.8)
- CVE-2024-34443 — WordPress Slider Revolution plugin < 6.7.11 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
- CVE-2024-4637 — Slider Revolution <= 6.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Elementor wrapperid and zindex (CVSS 5.4)
- CVE-2024-4581 — Slider Revolution <= 6.7.11 - Authenticated (Author+) Stored Cross-Site Scripting via Add Layer class, id, and title Attributes (CVSS 5.4)
- CVE-2024-4092 — Slider Revolution <= 6.7.7 - Authenticated (Author+) Stored Cross-Site Scripting via htmltag Parameter (CVSS 5.4)
- CVE-2024-2306 — Revslider <= 6.6.20 - Authenticated (Author+) Stored Cross-Site Scripting (CVSS 6.4)
- CVE-2023-6528 — Slider Revolution < 6.6.19 - Author+ Insecure Deserialization leading to RCE (CVSS 8.8)
- CVE-2023-47784 — WordPress Slider Revolution Plugin <= 6.6.15 is vulnerable to Arbitrary File Upload (CVSS 8.8)
- CVE-2023-47772 — WordPress Slider Revolution Plugin <= 6.6.14 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)
- CVE-2023-2359 — Revolution Slider <= 6.6.12 - Author+ Remote Code Execution (CVSS 8.8)
- CVE-2015-5151 — (CVSS 4.3)
- CVE-2014-9735 — (CVSS 7.5)
- CVE-2014-9734 — (CVSS 5.0)