PT-2026-42734 · WordPress · Slider By Soliloquy

Kitch Global · CVE-2026-7636 · Published 2026-05-22 · Updated 2026-05-22

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Slider by Soliloquy – Responsive Image Slider for WordPress versions prior to 2.8.2

Description An issue exists where authenticated attackers with subscriber-level access or higher can extract draft slider metadata. This includes unpublished media URLs, captions, and slider configurations created by administrators or editors. The flaw is located in the map meta cap function.

Recommendations Update to a version later than 2.8.1.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2026-7636

Affected Products

Slider By Soliloquy

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2026-7636 · Security Note
• https://plugins.trac.wordpress.org/browser/soliloquy-lite/trunk/includes/global/posttype.php#L125 · Note
• https://plugins.trac.wordpress.org/browser/soliloquy-lite/tags/2.8.1/includes/global/posttype.php#L125 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/54115a9a-dadd-4f18-a139-02ec89f0a571?source=cve · Note
• https://plugins.trac.wordpress.org/changeset/3538404/soliloquy-lite/trunk/includes/global/posttype.php?old=3395148&old_path=soliloquy-lite%2Ftrunk%2Fincludes%2Fglobal%2Fposttype.php · Note
• https://plugins.trac.wordpress.org/browser/soliloquy-lite/tags/2.8.1/includes/global/posttype.php#L177 · Note
• https://t.me/CVEtracker/54611 · Telegram Post
• https://plugins.trac.wordpress.org/browser/soliloquy-lite/trunk/includes/global/posttype.php#L177 · Note
• https://twitter.com/CVEnew/status/2057783166799126732 · Twitter Post
• https://plugins.trac.wordpress.org/browser/soliloquy-lite/trunk/includes/global/posttype.php#L90 · Note
• https://plugins.trac.wordpress.org/browser/soliloquy-lite/tags/2.8.1/includes/global/posttype.php#L90 · Note