Security Advisory

CVE-2026-7636

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-22 07:50:25
Last updated 2026-05-22 13:46:24
Assigner Wordfence
CVSS score 4.3
State PUBLISHED

Description

The Slider by Soliloquy – Responsive Image Slider for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 via the map_meta_cap. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract draft slider metadata including unpublished media URLs, captions, and slider configuration authored by administrators or editors.