CVE-2026-6692

Authenticated users with subscriber privileges or higher can exploit a file upload weakness in Slider Revolution plugin versions between 7.0.0 and 7.0.10. Inadequate checks on submitted files enable malicious uploads, potentially leading to executable content that could be remotely executed. A partial fix was introduced in version 7.0.10, with full remediation arriving in version 7.0.11.

Based on public CVE data (MITRE/NVD).