CVE-2026-6692 - Vulnerability Analysis

Overview

Slider Revolution WordPress plugin 7.0.0 to 7.0.10 contains an unrestricted file upload vulnerability caused by insufficient file type validation in '_get_media_url' and '_check_file_path' functions, letting authenticated attackers upload executable files and achieve remote code execution, exploit requires subscriber-level access or higher.

Severity & Score

Impact

Authenticated attackers can upload executable files, leading to remote code execution and full server compromise.

Mitigation

Update to version 7.0.11 or later.

References

• https://www.sliderrevolution.com/
• https://www.wordfence.com/threat-intel/vulnerabilities/id/a2e802a6-d2f1-47cc-883a-89110e569168?source=cve

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner