The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to and including 7.0.10. This vulnerability is due to three compounding design flaws: (1) the plugin leaks a valid backend AJAX nonce (revslider_actions) to all authenticated users including Subscribers via the admin_footer hook; (2) the wordpress.create.image_from_url action is explicitly allowlist [truncated]
CVE-2026-6728 is a sensitive information exposure issue in the Slider Revolution WordPress plugin affecting versions up to and including 7.0.9. The issue is tied to the get_stream_data() function and can let unauthenticated attackers extract published password-protected post, page, and product content. The impact is confidentiality-only, but it can still expose content that site owners expected to keep re [truncated]
