CVE-2023-6528

8.8 highEPSS 1.4%

High (8.8) in themepunch slider revolution. EPSS 1.4% chance of exploitation in the next 30 days.

The Slider Revolution WordPress plugin before 6.6.19 does not prevent users with at least the Author role from unserializing arbitrary content when importing sliders, potentially leading to Remote Code Execution.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-502
Published: 2024-01-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

themepunch:slider_revolution

References

https://wpscan.com/vulnerability/36ced447-84ea-4162-80d2-6df226cb53cb
https://wpscan.com/vulnerability/36ced447-84ea-4162-80d2-6df226cb53cb

Check your stack JSON