This vulnerability in Slider Revolution arises from missing authorization checks, allowing an unauthenticated attacker to perform actions that should require authorization. It affects all versions before 6.7.0. The CVSS 3.1 base score is 7.1, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and a scope change with low impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and the vulnerability is not related to a cloud service.

An attacker can exploit this missing authorization to perform unauthorized actions within the Slider Revolution plugin context. The impact includes limited confidentiality, integrity, and availability loss. Since the vulnerability requires user interaction, exploitation may depend on social engineering or tricking a user. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor for updates from ThemePunch OHG and consider restricting access to the affected plugin where possible. Avoid relying on user interaction to mitigate risk, as this is required for exploitation.