CVE-2023-2359

8.8 highEPSS 2.5%

High (8.8) in themepunch slider revolution. EPSS 2.5% chance of exploitation in the next 30 days.

The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2023-06-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

themepunch:slider_revolution

References

https://wpscan.com/vulnerability/a8350890-e6d4-4b04-a158-2b0ee3748e65
https://wpscan.com/vulnerability/a8350890-e6d4-4b04-a158-2b0ee3748e65
https://wpscan.com/vulnerability/a8350890-e6d4-4b04-a158-2b0ee3748e65/

Check your stack JSON