PT-2015-4368 · Themepunch · Slider Revolution

Daniel Cid · Published 2015-06-30 · Updated 2026-01-28 · CVE-2014-9734

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Slider Revolution (revslider) plugin versions prior to 4.2 for WordPress

Description The issue allows remote attackers to read arbitrary files by exploiting a directory traversal vulnerability in the Slider Revolution plugin. This is achieved by including a .. (dot dot) in the img parameter within a revslider show image action to the "/wp-admin/admin-ajax.php" endpoint.

Recommendations For versions prior to 4.2, update the Slider Revolution (revslider) plugin to version 4.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the "/wp-admin/admin-ajax.php" endpoint or disabling the revslider show image action until the update is applied.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2014-9734

Affected Products

Slider Revolution

References · 12

• 🔥 http://packetstormsecurity.com/files/132366/WordPress-Revslider-4.2.2-XSS-Information-Disclosure.html · Exploit
• 🔥 http://exploit-db.com/exploits/34511 · Exploit
• 🔥 https://exploit-db.com/exploits/36554 · Exploit
• 🔥 https://blog.sucuri.net/2014/09/slider-revolution-plugin-critical-vulnerability-being-exploited.html · Exploit
• 🔥 https://blog.sucuri.net/2014/12/revslider-vulnerability-leads-to-massive-wordpress-soaksoak-compromise.html · Exploit
• 🔥 https://exploit-db.com/exploits/34511 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-9734 · Security Note
• http://marketblog.envato.com/news/plugin-vulnerability · Note
• https://t.me/cveNotify/150211 · Telegram Post
• https://plugins.trac.wordpress.org/browser/patch-for-revolution-slider/trunk/revsliderpatch.php · Note
• http://marketblog.envato.com/news/affected-themes · Note
• https://t.me/breachdetector/791039 · Telegram Post