PT-2026-45667
CVE-2026-9050
·
Published
2026-06-01
·
Updated
2026-06-02
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Slider Revolution versions 6.0.0 through 6.7.55
Slider Revolution versions 7.0.0 through 7.0.14
Description
An issue exists where the plugin fails to properly verify if a user is authorized to perform specific actions. This allows authenticated attackers with Contributor-level access or higher to deactivate any active plugin installed on the site.
Recommendations
Update versions 6.0.0 through 6.7.55 to a version newer than 6.7.55.
Update versions 7.0.0 through 7.0.14 to a version newer than 7.0.14.
Found an issue in the description? Have something to add? Feel free to write us 👾