Slider Revolution
Vendor:
First CVE: Jun 30, 2015 · Active for 11 years
15
Total CVEs
More Total CVEs than 93% of tracked products
3.8
Avg CVEs / Year
Higher CVE frequency than 85% of tracked products
6.4
Avg CVSS
Higher Avg CVSS than 32% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Slider Revolution over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jun 30, 2015
11 years ago
Most Recent CVE
Jul 2, 2026
26 days ago
CVE Severity & Scoring
Slider Revolution15 CVEs
60%
40%
All CVEs353,240 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network12 (80.0%)
Unknown3 (20.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low12 (80.0%)
High0 (0.0%)
Unknown3 (20.0%)
User Interaction
None3 (20.0%)
Unknown3 (20.0%)
Required9 (60.0%)
Privileges Required
Low9 (60.0%)
High1 (6.7%)
None2 (13.3%)
Unknown3 (20.0%)
Top CVEs
Signals from CVEs in this product scope (15 CVEs).
15 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-9735HIGH The ThemePunch Slider Revolution (revslider) plugin before 3.0.96 for WordPress and Showbiz Pro plugin 1.7.1 and earlier for Wordpress does not properly restrict access to administ | Jun 30, 2015 | 7.5 | 84 | NO | YES |
CVE-2014-9734MEDIUM Directory traversal vulnerability in the Slider Revolution (revslider) plugin before 4.2 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the img | Jun 30, 2015 | 5.0 | 31 | NO | YES |
CVE-2026-57678HIGH Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemePunch Slider Revolution allows Reflected XSS.
This issue affects Slider | Jul 2, 2026 | 7.1 | 29 | NO | NO |
CVE-2023-2359HIGH The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Ex | Jun 19, 2023 | 8.8 | 26 | NO | NO |
CVE-2024-34444HIGH Missing Authorization vulnerability in ThemePunch OHG Slider Revolution.This issue affects Slider Revolution: from n/a before 6.7.0. | Jun 19, 2024 | 8.8 | 25 | NO | NO |
CVE-2023-6528HIGH The Slider Revolution WordPress plugin before 6.6.19 does not prevent users with at least the Author role from unserializing arbitrary content when importing sliders, potentially l | Jan 8, 2024 | 8.8 | 25 | NO | NO |
CVE-2023-47784HIGH Unrestricted Upload of File with Dangerous Type vulnerability in ThemePunch OHG Slider Revolution.This issue affects Slider Revolution: from n/a through 6.6.15. | Dec 20, 2023 | 8.8 | 23 | NO | NO |
CVE-2024-34443MEDIUM Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemePunch OHG Slider Revolution allows Stored XSS.This issue affects S | Jun 19, 2024 | 5.4 | 18 | NO | NO |
CVE-2024-4581MEDIUM The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Add Layer widget in all versions up to, and including, 6.7.11 due to insuff | Jun 4, 2024 | 5.4 | 18 | NO | NO |
CVE-2024-4637MEDIUM The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 6.7.10 due to insufficient input sanitization and outp | Jun 4, 2024 | 5.4 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (15 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
6.7% of CVEs· 97th percentile
Nuclei
1 CVE
6.7% of CVEs· 97th percentile
ExploitDB
2 CVEs
13.3% of CVEs· 87th percentile
Social Chatter
Signals from CVEs in this product scope (15 CVEs).
Media Mentions
Signals from CVEs in this product scope (15 CVEs).
Top CNAs Publishing CVEs For Slider Revolution
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 4.2.2 | 1 | 4.3 | 1.7% | 0 | 0 |