CVE-2023-2359

HIGH EXPLOITED RANSOMWARE

Slider Revolution < 6.6.12 - Arbitrary File Upload and Remote Code Execution via Image Import

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2023-2359 has been observed exploited in the wild (reported by VulnCheck KEV), including in ransomware campaigns.

Description

The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations.

References (2)

Core 2
Core References
Exploit, Third Party Advisory exploit vdb-entry technical-description
https://wpscan.com/vulnerability/a8350890-e6d4-4b04-a158-2b0ee3748e65

Scores

CVSS v3 8.8
EPSS 0.0254
EPSS Percentile 83.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

VulnCheck KEV 2025-03-19
Ransomware Use Confirmed
CWE
CWE-94
Status published
Products (1)
themepunch/slider_revolution < 6.6.12
Published Jun 19, 2023
Tracked Since Feb 18, 2026