CVE-2026-6728
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
The Slider Revolution plugin for WordPress up to version 7.0.9 has a sensitive information exposure vulnerability via the 'get_stream_data()' function. Unauthenticated attackers can extract data including password-protected post, page, and product content.
Risk Assessment
An attacker can access content intended only for authorized users, potentially leading to leakage of confidential business information or privacy violations.
Recommendation
Update the Slider Revolution plugin to version 7.0.10 or later, which restricts access to the get_stream_data() function.
Original NVD description (English source)
The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 7.0.9 via the 'get_stream_data()' function. This makes it possible for unauthenticated attackers to extract sensitive data including published password-protected post, page, and product content.