6.1.3

DATE	CVE	VULNERABILITY TITLE	RISK
2023-06-19	CVE-2023-2359	Code Injection vulnerability in Themepunch Slider Revolution The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations. network low complexity themepunch CWE-94	8.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.