Skip to content
OpenAdvisories

Vendor

Revolution Slider

12 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Slider Revolution 7.0.0 - 7.0.10 - Authenticated (Subscriber+) Arbitrary File Upload via _get_media_url

    The Slider Revolution plugin for WordPress is vulnerable to Arbitrary File Upload in versions 7.0.0 to 7.0.10 via the '_get_media_url' and '_check_file_path' function. This is due to insufficient file type validation. This makes it possible for authenticated …