CVE-2023-6528 Slider Revolution < 6.6.19 - Author+ Insecure Deserialization leading to RCE

2024-01-0819:00:34

WPScan

www.cve.org

cve-2023-6528

slider revolution

wordpress

plugin

author role

remote code execution

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.6%

JSON

The Slider Revolution WordPress plugin before 6.6.19 does not prevent users with at least the Author role from unserializing arbitrary content when importing sliders, potentially leading to Remote Code Execution.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Slider Revolution",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "6.6.19"
      }
    ],
    "defaultStatus": "unaffected"
  }
]