CVE-2026-9048

4.3 Moyenne

Publiée le 02/06/2026 à 02:16 · Modifiée le 22/07/2026 à 21:10 · Analyse NVD reportée · Source : security@wordfence.com

Description

The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 7.0.0 - 7.0.14, via the 'slider.get.full' AJAX Action. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including raw social media API credentials: the Instagram OAuth token, Flickr API key, YouTube Data API key, and Facebook App ID, stored in any configured slider's settings.

Traduire en français

Produits concernés

Revolution Slider Slider Revolution

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.3 Moyenne	security@wordfence.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N`

Faiblesses (CWE)

CWE-863

Références

https://www.sliderrevolution.com/
https://www.wordfence.com/threat-intel/vulnerabilities/id/e4396411-57a2-4bef-9dfb-cbcdc1292de0?source=cve

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories