RRevolution Slider

Products

Exploited and recent CVEs

• CVE-2026-7542 Medium 6.5 Slider Revolution 7.0 - 7.0.10 - Authenticated (Subscriber+) Sensitive Information Disclosure 0.3%
• CVE-2026-9048 Medium 4.3 Slider Revolution 7.0.0 - 7.0.14 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure 0.2%
• CVE-2026-9050 Medium 4.3 Slider Revolution 6.0.0-6.7.55 and 7.0.0-7.0.14 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin Deactivation 0.2%
• CVE-2026-6728 Medium 5.3 Slider Revolution <= 7.0.9 - Unauthenticated Sensitive Information Exposure via 'sliders/stream' 0.3%
• CVE-2026-6692 High 8.8 Slider Revolution 7.0.0 - 7.0.10 - Authenticated (Subscriber+) Arbitrary File Upload via _get_media_url 0.8%
• CVE-2025-10249 Medium 6.5 Slider Revolution <= 6.7.37 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Read 0.4%
• CVE-2025-9217 Medium 6.5 Slider Revolution <= 6.7.36 - Authenticated (Contributor+) Arbitrary File Read via 'used_svg' and 'used_images' 0.5%
• CVE-2024-8107 Medium 6.4 Slider Revolution <= 6.7.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
• CVE-2024-4637 Medium 6.4 Slider Revolution <= 6.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Elementor wrapperid and zindex 0.3%
• CVE-2024-4581 Medium 6.4 Slider Revolution <= 6.7.11 - Authenticated (Author+) Stored Cross-Site Scripting via Add Layer class, id, and title Attributes 0.3%
• CVE-2024-4092 Medium 6.4 Slider Revolution <= 6.7.7 - Authenticated (Author+) Stored Cross-Site Scripting via htmltag Parameter 0.4%
• CVE-2024-2306 Medium 6.4 Revslider <= 6.6.20 - Authenticated (Author+) Stored Cross-Site Scripting 0.3%