CVE-2023-2359: vulnerability in Slider Revolution
Revolution Slider <= 6.6.12 - Author+ Remote Code Execution
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
25Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Attendepss 2.5%
from disclosure to weapon
Published on NVDJun 19
VulnCheck+639d
The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations.
Affected products
Unknown · Slider RevolutionRelated CVEs — Slider Revolution
In the same product, most dangerous first.