CVE-2023-2359 Revolution Slider <= 6.6.12 - Author+ Remote Code Execution

2023-06-1910:52:49

WPScan

www.cve.org

cve-2023-2359

slider revolution

remote code execution

image upload

arbitrary file

server configuration

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.6%

JSON

The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Slider Revolution",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThanOrEqual": "6.6.12"
      }
    ],
    "defaultStatus": "affected"
  }
]