blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2026-6728

MEDIUM 5.3 CVSS 3.1
Published
May 20, 2026
Last modified
July 24, 2026
NVD status
Deferred
Reported by
security@wordfence.com
Weakness
CWE-200
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 7.0.9 via the 'get_stream_data()' function. This makes it possible for unauthenticated attackers to extract sensitive data including published password-protected post, page, and product content.

Affected products and versions

  • Revolution Slider Slider Revolution — From 6.0 (including) to 6.7.54 (including)
  • Revolution Slider Slider Revolution — From 7.0 (including) to 7.0.9 (including)

References