A vulnerability categorized as critical has been discovered in Revolution Slider Slider Revolution Plugin up to 7.0.10 on WordPress. The affected element is the function _get_media_url/_check_file_path. Such manipulation leads to unrestricted upload.

This vulnerability is documented as CVE-2026-6692. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.