Sensitive Information Exposure in Slider Revolution Plugin for WordPress
CVE-2026-6728

5.3MEDIUM

Key Information:

Vendor

WordPress
Status
Slider Revolution
Vendor
CVE Published:
20 May 2026

What is CVE-2026-6728?

The Slider Revolution plugin for WordPress is impacted by a vulnerability that allows unauthenticated attackers to exploit the 'get_stream_data()' function. This weakness enables the extraction of sensitive data, including content from password-protected posts, pages, and products, potentially leading to data leaks. Users of versions up to and including 7.0.9 are particularly at risk, and immediate updates are recommended to safeguard against unauthorized access to sensitive information.

Affected Version(s)

Slider Revolution 0 <= 7.0.9

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://www.sliderrevolution.com/changelog/

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mostafa
.