WordPress Revslider plugin suffers from cross site scripting and remote shell upload vulnerabilities.