Sensitive Information Exposure in Slider by Soliloquy for WordPress
CVE-2026-7636

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Slider By Soliloquy – Responsive Image Slider For WordPress
Vendor
CVE Published:
22 May 2026

What is CVE-2026-7636?

The Slider by Soliloquy plugin for WordPress is susceptible to a vulnerability that allows authenticated users with subscriber-level access or higher to access and extract sensitive metadata. This includes information such as unpublished media URLs, captions, and the configuration details of sliders created by administrators or editors. If exploited, this flaw can potentially lead to unauthorized exposure of confidential media assets and configurations.

Affected Version(s)

Slider by Soliloquy – Responsive Image Slider for WordPress 0 <= 2.8.1

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://plugins.trac.wordpress.org/browser/soliloquy-lite...
https://plugins.trac.wordpress.org/browser/soliloquy-lite...

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Kitch Global
.