Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h5fw-r25r-72cx

Опубликовано: 09 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The Slider Revolution plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on several functions in all versions up to, and including, 6.7.37. This makes it possible for authenticated attackers, with Contributor-level access and above, to install and activate plugin add-ons, create sliders, and download arbitrary files.

The Slider Revolution plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on several functions in all versions up to, and including, 6.7.37. This makes it possible for authenticated attackers, with Contributor-level access and above, to install and activate plugin add-ons, create sliders, and download arbitrary files.

EPSS

Процентиль: 22%
0.00072
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-23

Связанные уязвимости

CVSS3: 6.5
nvd
4 месяца назад

The Slider Revolution plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on several functions in all versions up to, and including, 6.7.37. This makes it possible for authenticated attackers, with Contributor-level access and above, to install and activate plugin add-ons, create sliders, and download arbitrary files.

EPSS

Процентиль: 22%
0.00072
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-23