Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-2359

Revolution Slider <= 6.6.12 - Author+ Remote Code Execution

Description

The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Slider Revolution

Default version status: affected

  • 0 to ≤ 6.6.12affected

References