What is GHSA-qp4q-9v3r-37r2?

GHSA-qp4q-9v3r-37r2 is a security advisory published by GitHub Security Advisories with Medium severity. The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in...

Which CVE IDs does GHSA-qp4q-9v3r-37r2 cover?

GHSA-qp4q-9v3r-37r2 covers the following CVE IDs: CVE-2026-9048. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qp4q-9v3r-37r2?

GHSA-qp4q-9v3r-37r2 has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

GHSA-qp4q-9v3r-37r2MediumCVSS 4.3

The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in...

Vendor

GitHub Security Advisories

Published

June 2, 2026

Last Modified

June 2, 2026

🔗 CVE IDs covered (1)

CVE-2026-9048 →

📋 Description

The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 7.0.0 - 7.0.14, via the 'slider.get.full' AJAX Action. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including raw social media API credentials: the Instagram OAuth token, Flickr API key, YouTube Data API key, and Facebook App ID, stored in any configured slider's settings.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-9048
https://www.sliderrevolution.com
https://www.wordfence.com/threat-intel/vulnerabilities/id/e4396411-57a2-4bef-9dfb-cbcdc1292de0?source=cve
https://github.com/advisories/GHSA-qp4q-9v3r-37r2