CVE-2026-6692: WordPress Slider Revolution RCE Vulnerability
The National Vulnerability Database has disclosed CVE-2026-6692, a critical arbitrary file upload vulnerability impacting the Slider Revolution plugin for WordPress. Versions 7.0.0 through 7.0.10 are affected. The flaw stems from insufficient file type validation within the _get_media_url and _check_file_path functions, allowing authenticated attackers with subscriber-level access or higher to upload executable files.
This vulnerability fundamentally undermines the security perimeter of affected WordPress sites. An attacker leveraging this flaw can achieve remote code execution (RCE), granting them full control over the compromised server. The CVSS score of 8.8 (HIGH) reflects the severe impact and ease of exploitation, as it requires only low privileges and no user interaction.
While the vulnerability was partially addressed in version 7.0.10, a full patch is only available in version 7.0.11. This means any site running an older version, even 7.0.10, remains exposed to significant risk. Defenders must understand that ‘partial patch’ is a euphemism for ‘still vulnerable.’
What This Means For You
- If your organization uses WordPress with the Slider Revolution plugin, immediately audit your version. Any installation running Slider Revolution versions 7.0.0 through 7.0.10 is critically vulnerable to remote code execution. Patch to version 7.0.11 without delay. Prioritize this as an urgent, high-severity action.
Related ATT&CK Techniques
🛡️ Detection Rules
3 rules · 6 SIEM formats3 detection rules auto-generated for this incident, mapped to MITRE ATT&CK. Sigma YAML is free — export to any SIEM format via the Intel Bot.
CVE-2026-6692: WordPress Slider Revolution Arbitrary File Upload
title: CVE-2026-6692: WordPress Slider Revolution Arbitrary File Upload
id: scw-2026-05-07-ai-1
status: experimental
level: critical
description: |
Detects the arbitrary file upload vulnerability in WordPress Slider Revolution plugin (CVE-2026-6692). This rule specifically looks for the 'revslider_ajax_action' client action combined with the 'upload' parameter within the admin-ajax.php endpoint, which is indicative of an attempt to exploit the file upload vulnerability.
author: SCW Feed Engine (AI-generated)
date: 2026-05-07
references:
- https://shimiscyberworld.com/posts/nvd-CVE-2026-6692/
tags:
- attack.initial_access
- attack.t1190
logsource:
category: webserver
detection:
selection:
cs-uri|contains:
- '/wp-admin/admin-ajax.php'
cs-method:
- 'POST'
cs-uri-query|contains:
- 'action=revslider_ajax_action'
selection_revslider_action:
cs-uri-query|contains:
- 'client_action=upload'
condition: selection AND selection_revslider_action
falsepositives:
- Legitimate administrative activity
Source: Shimi's Cyber World · License & reuse
Indicators of Compromise
| ID | Type | Indicator |
|---|---|---|
| CVE-2026-6692 | RCE | WordPress plugin Slider Revolution versions 7.0.0 to 7.0.10 |
| CVE-2026-6692 | Arbitrary File Upload | Slider Revolution plugin functions: '_get_media_url' and '_check_file_path' |
| CVE-2026-6692 | Auth Bypass | Authenticated attackers with subscriber-level access |
Written by SCW Vulnerability Desk
Source & Attribution
| Source Platform | NVD |
| Channel | National Vulnerability Database |
| Published | May 07, 2026 at 09:16 UTC |
This content was AI-rewritten and enriched by Shimi's Cyber World based on the original source. All intellectual property rights remain with the original author.
Believe this infringes your rights? Submit a takedown request.
Related coverage
CVE-2026-8063 — Null Pointer Dereference
CVE-2026-8063 — An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an empty pipeline on a view. When resolving a view, the...
WP-Optimize Plugin Flaw Allows Arbitrary File Deletion, RCE via wp-config.php
CVE-2026-7252 — The WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance plugin for WordPress is vulnerable to arbitrary...
CVE-2026-4348: Unauthenticated SQLi in BetterDocs Pro WordPress Plugin
CVE-2026-4348 — The BetterDocs Pro plugin for WordPress is vulnerable to SQL Injection via the `get_current_letter_docs` and `docs_sort_by_letter` AJAX actions in all versions up to,...