Slider Revolution Missing Capability Check Vulnerability Allowing Unauthorized Data Modification

A vulnerability exists in the Slider Revolution plugin for WordPress, in all versions through 6.7.37, due to a missing capability check on several functions. This flaw allows authenticated attackers with Contributor-level access and above to gain unauthorized access and modify data. Exploitation of this vulnerability could enable these attackers to install and activate plugin add-ons, create sliders, and download arbitrary files.

Impact

Exploitation of this vulnerability could lead to unauthorized access and modification of data, allowing attackers to manipulate slider content and download files from the server.

Remediation

Users are advised to update the Slider Revolution plugin to version 6.7.38 or a newer patched version.