Slider Revolution Security Vulnerabilities and Issues — Slider Revolution CVE List

Lucene search

ThemepunchSlider Revolution

5 matches found

CVE•added 2023/11/20 3:15 p.m.•77 views

CVE-2023-47772

Contributor+ Stored Cross-Site Scripting (XSS) vulnerability in Slider Revolution

6.5CVSS5.6AI score0.0009EPSS

CVE•added 2024/10/01 7:15 a.m.•59 views

CVE-2024-8107

The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.7.18 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and abov...

6.4CVSS5.6AI score0.00048EPSS

CVE•added 2024/05/02 5:15 p.m.•54 views

CVE-2024-4092

The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘htmltag’ parameter in all versions up to, and including, 6.7.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web scri...

6.4CVSS5.7AI score0.00206EPSS

CVE•added 2024/06/04 10:15 a.m.•30 views

CVE-2024-4637

The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 6.7.10 due to insufficient input sanitization and output escaping on the user supplied Elementor 'wrapperid' and 'zindex' display attributes. This makes it possible for auth...

6.4CVSS5.9AI score0.00225EPSS

CVE•added 2024/06/04 9:15 a.m.•27 views

CVE-2024-4581

The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Add Layer widget in all versions up to, and including, 6.7.11 due to insufficient input sanitization and output escaping on the user supplied 'class', 'id', and 'title' attributes. This makes it...

6.4CVSS5.9AI score0.00236EPSS