Input validation vulnerability in Slider Revolution 6.7.18

A popular WordPress plugin called Slider Revolution has a security issue that makes it vulnerable to attacks. This is because the plugin does not properly check for harmful code in SVG files that are uploaded to the website. This means that someone with certain access levels can inject harmful code into the website, which can then be activated whenever someone views the SVG file. This can be especially dangerous for administrators, but it is also possible for other users with author-level access to exploit this vulnerability.

Detected in:

Slider Revolution fixed vulnerable versions: >= * <= 6.7.18

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.