Slider Revolution Path Traversal Vulnerability Allowing Arbitrary File Read

A path traversal vulnerability has been identified in the Slider Revolution plugin for WordPress, affecting all versions through 6.7.36. The vulnerability arises in the 'used_svg' and 'used_images' parameters, allowing authenticated attackers with Contributor-level access or higher to read arbitrary files on the server that may contain sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the server.

Remediation

Users are advised to update the Slider Revolution plugin to version 6.7.37 or a newer patched version.