CVE-2014-9735

The Slider Revolution plugin for WordPress before version 3.0.96 fails to properly validate user permissions when processing administrator-level AJAX requests, enabling unauthenticated attackers to upload and execute arbitrary files, delete sliders from the database, and create or modify slider content. The same vulnerability affects Showbiz Pro plugin version 1.7.1 and earlier, and any WordPress themes that bundle the vulnerable revslider code are also affected.

Based on public CVE data (MITRE/NVD).