PT-2026-45667 · WordPress · Slider Revolution

Duc193 + 1 · Published 2026-06-01 · Updated 2026-06-02 · CVE-2026-9050

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Slider Revolution versions 6.0.0 through 6.7.55 Slider Revolution versions 7.0.0 through 7.0.14

Description An issue exists where the plugin fails to properly verify if a user is authorized to perform specific actions. This allows authenticated attackers with Contributor-level access or higher to deactivate any active plugin installed on the site.

Recommendations Update versions 6.0.0 through 6.7.55 to a version newer than 6.7.55. Update versions 7.0.0 through 7.0.14 to a version newer than 7.0.14.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-9050

Affected Products

Slider Revolution

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-9050 · Security Note
• https://wordfence.com/threat-intel/vulnerabilities/id/3a036855-35e0-4efd-aa27-16189b3538e9?source=cve · Note
• https://twitter.com/VulmonFeeds/status/2061728873276997840 · Twitter Post
• https://sliderrevolution.com · Note