CVE-2023-6528

Slider Revolution < 6.6.19 - Author+ Insecure Deserialization leading to RCE

High · published January 8, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
71.7
In the wild
Unconfirmed
What it is

The Slider Revolution WordPress plugin before 6.6.19 does not prevent users with at least the Author role from unserializing arbitrary content when importing sliders, potentially leading to Remote Code Execution.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01370 · 71.7th percentile
Published
2024-01-08T19:00Z
EPSS history
Timeline
  • 08 JAN 19:00Z
    Slider Revolution < 6.6.19 - Author+ Insecure Deserialization leading to RCE
    cvelistv5