High severity8.8NVD Advisory· Published Jun 19, 2023· Updated Jun 17, 2026

CVE-2023-2359

Description

The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Slider Revolutionllm-fuzzy
Range: <=6.6.12
Package: https://wordpress.org/plugins/slider-revolution
Themepunch/Slider Revolutionv52 versions
0+ 1 more
- (no CPE)range: 0
- cpe:2.3:a:themepunch:slider_revolution:*:*:*:*:*:wordpress:*:*range: <=6.6.12

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/a8350890-e6d4-4b04-a158-2b0ee3748e65nvdExploitThird Party Advisory
wpscan.com/vulnerability/a8350890-e6d4-4b04-a158-2b0ee3748e65/nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000