Now officially on WordPress.org

CVE Database / CVE-2026-9048

CVE · Medium

CVE-2026-9048 — Slider Revolution [revslider] < 7.0.15

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-9048 Slider Revolution [revslider] < 7.0.15 Incorrect Authorization Medium 4.3 < 7.0.15 7.0.15 2026-06-01 —

CVE-2026-9048

Authenticated users with contributor privileges or higher can obtain sensitive information from WordPress installations using Slider Revolution plugin versions 7.0.0 through 7.0.14 by exploiting the 'slider.get.full' AJAX Action. This vulnerability allows unauthorized access to social media API credentials, specifically Instagram OAuth tokens, Flickr API keys, YouTube Data API keys, and Facebook App IDs stored in slider settings.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings