CVE-2023-6528
HIGHCVSS v3
8.8
HIGH
EPSS Score
15.8%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
The Slider Revolution WordPress plugin before 6.6.19 does not prevent users with at least the Author role from unserializing arbitrary content when importing sliders, potentially leading to Remote Code Execution.
Technical Details
- Published
- 1/8/2024
Frequently Asked Questions
What is CVE-2023-6528?
The Slider Revolution WordPress plugin before 6.6.19 does not prevent users with at least the Author role from unserializing arbitrary content when importing sliders, potentially leading to Remote Code Execution.
Is CVE-2023-6528 actively exploited?
Active exploitation of CVE-2023-6528 has not been confirmed. The EPSS score is 15.8%, indicating the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2023-6528?
CVE-2023-6528 has a CVSS v3 base score of 8.8 (HIGH severity).
Is CVE-2023-6528 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.