CVE-2023-2359

The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

2.54% chance of exploitation in the next 30 days, 84th percentile

Published

2023-06-19

Updated

2024-12-12

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/a8350890-e6d4-4b04-a158-2b0ee3748e65

References

• CVE Record
• NVD entry

Related

• CVE-2023-23583
• CVE-2023-23596
• CVE-2023-23581
• CVE-2023-23607
• CVE-2023-23571
• CVE-2023-23608