CVE-2023-2359

Revolution Slider <= 6.6.12 - Author+ Remote Code Execution

published June 19, 2023

CVSS
—
EPSS
3%
Percentile
84.9
In the wild
Unconfirmed
What it is

The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02540 · 84.9th percentile
Published
2023-06-19T10:52Z
EPSS history
Timeline
  • 19 JUN 10:52Z
    Revolution Slider <= 6.6.12 - Author+ Remote Code Execution
    cvelistv5