CVE-2023-2359

Revolution Slider <= 6.6.12 - Author+ Remote Code Execution

The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations.

Affected

Slider Revolution

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

2.54% chance of exploitation in the next 30 days, 85th percentile

Published

2023-06-19

Updated

2024-12-12

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/a8350890-e6d4-4b04-a158-2b0ee3748e65

References

• CVE Record
• NVD entry