← CVE Intelligence

CVE-2023-6528

Slider Revolution < 6.6.19 - Author+ Insecure Deserialization leading to RCE PUBLISHED

Description (CNA)

The Slider Revolution WordPress plugin before 6.6.19 does not prevent users with at least the Author role from unserializing arbitrary content when importing sliders, potentially leading to Remote Code Execution.

Affected (CNA)

Vendor / productVersions
Unknown / Slider Revolutionaffected 0 before 6.6.19

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.