CVE-2023-2359

The Slider Revolution plugin for WordPress before version 6.6.13 contains a file upload vulnerability that stems from insufficient validation of uploaded file types. Attackers with administrator privileges can exploit this flaw to upload malicious files to the server, potentially enabling remote code execution. Although the vulnerability typically requires administrator access, site configurations may grant this capability to lower-privileged users such as authors.

Based on public CVE data (MITRE/NVD).