Revolution Slider vulnerabilities

CVEs per yearBy the year they were published

1. 20245
2. 20252
3. 20265

Newest CVEs

• CVE-2026-7542

  Slider Revolution 7.0 - 7.0.10 - Authenticated (Subscriber+) Sensitive Information Disclosure

  Revolution Slider · Slider Revolution

  Medium6.5
• CVE-2026-9048

  Slider Revolution 7.0.0 - 7.0.14 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure

  Revolution Slider · Slider Revolution

  Medium4.3
• CVE-2026-9050

  Slider Revolution 6.0.0-6.7.55 and 7.0.0-7.0.14 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin Deactivation

  Revolution Slider · Slider Revolution

  Medium4.3
• CVE-2026-6728

  Slider Revolution <= 7.0.9 - Unauthenticated Sensitive Information Exposure via 'sliders/stream'

  Revolution Slider · Slider Revolution

  Medium5.3
• CVE-2026-6692

  Slider Revolution 7.0.0 - 7.0.10 - Authenticated (Subscriber+) Arbitrary File Upload via _get_media_url

  Revolution Slider · Slider Revolution

  High8.8
• CVE-2025-10249

  Slider Revolution <= 6.7.37 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Read

  Revolution Slider · Slider Revolution

  Medium6.5
• CVE-2025-9217

  Slider Revolution <= 6.7.36 - Authenticated (Contributor+) Arbitrary File Read via 'used_svg' and 'used_images'

  Revolution Slider · Slider Revolution

  Medium6.5
• CVE-2024-8107

  Slider Revolution <= 6.7.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

  Revolution Slider · Slider Revolution

  Medium6.4
• CVE-2024-4637

  Slider Revolution <= 6.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Elementor wrapperid and zindex

  Revolution Slider · Slider Revolution

  Medium6.4
• CVE-2024-4581

  Slider Revolution <= 6.7.11 - Authenticated (Author+) Stored Cross-Site Scripting via Add Layer class, id, and title Attributes

  Revolution Slider · Slider Revolution

  Medium6.4