UpHeron
All vulnerabilities

Servers and applications · WordPress plugins

CVE-2023-47784

Slider Revolution: Unrestricted Upload of File with Dangerous Type

Severity
High 8.8
Published
14 Nov 2023
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
6.6.16
Also known as
WPV-c5ed64fec19d
Sources
NVD, WPVulnerability

Description

Unrestricted Upload of File with Dangerous Type vulnerability in ThemePunch OHG Slider Revolution.This issue affects Slider Revolution: from n/a through 6.6.15.

Affected software

SoftwareAffected versions
Slider RevolutionServers and applications · cpe:a:themepunch:slider_revolution
  • Every version up to 6.6.15
Slider RevolutionWordPress plugins · wp-plugin:revslider
  • Every version before 6.6.16

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-47784
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-47784
  • Wordfence https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/revslider/slider-revolution-6615-authenticated-author-arbitrary-file-upload