CVE-2023-6528

Summary

CVE-2023-6528 is a newly disclosed vulnerability affecting the Slider Revolution plugin for WordPress. Users with the Author role or higher can import malicious slider content, resulting in unserialization of arbitrary code. This issue potentially enables Remote Code Execution (RCE), posing a significant security risk. We strongly advise plugin users to update to version 6.6.19 or later to mitigate this vulnerability. Failure to do so may expose WordPress sites to unauthorized access and potential data breaches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.