Slider Revolution Arbitrary File Upload Vulnerability (7.0.0-7.0.10)

Slider Revolution 7.0.0 - 7.0.10 Arbitrary File Upload Vulnerability Vulnerability Overview The Slider Revolution plugin contains an arbitrary file upload vulnerability. Attackers can upload malicious files via the and functions. This vulnerability is caused by insufficient file type validation, allowing authenticated users with Subscriber role or higher to upload files that may contain malicious code. Affected Versions Affected Versions: Slider Revolution 7.0.0 - 7.0.10 Software Type: WordPress Plugin CVSS Score: 8.8 Remediation Upgrade to version 7.0.11 or any patched version. Related Vulnerabilities The page lists several vulnerabilities related to Slider Revolution, including: 1. CVE-2025-10249: Slider Revolution <= 6.7.37 - Lack of Authorization to Authentication (Contributor+) Arbitrary File Read 2. CVE-2025-9217: Slider Revolution <= 6.7.36 - Authentication (Contributor+) Arbitrary File Read 3. CVE-2024-6107: Slider Revolution <= 6.7.18 - Authentication (Author+) Stored Cross-Site Scripting 4. CVE-2024-37449: Slider Revolution <= 6.7.13 - Authentication (Admin+) Stored Cross-Site Scripting 5. CVE-2024-4637: Slider Revolution <= 6.7.10 - Authentication (Contributor+) Stored Cross-Site Scripting 6. CVE-2024-4581: Slider Revolution <= 6.7.11 - Authentication (Author+) Stored Cross-Site Scripting 7. CVE-2024-34444: Slider Revolution <= 6.6.20 - Lack of Authorization 8. CVE-2024-34443: Slider Revolution <= 6.7.10 - Authentication (Author+) Stored Cross-Site Scripting 9. CVE-2024-4092: Slider Revolution <= 6.7.7 - Authentication (Author+) Stored Cross-Site Scripting 10. CVE-2024-2306: Revslider <= 6.6.20 - Authentication (Author+) Stored Cross-Site Scripting Additional Information Last Updated: May 7, 2026 Researcher: Nikita Official Website: www.sliderrevolution.com Please note that the above information is compiled based on the page content. For specific details, please refer to the official documentation and patch notes.

Goal Reached Thanks to every supporter — we hit 100%!

Slider Revolution Arbitrary File Upload Vulnerability (7.0.0-7.0.10)

More from this source