Smart Slider 3
Approved changes feed: RSS · Atom
cpe:2.3:a:nextendweb:smart_slider_3:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Nextendweb (da1c10d6-feae-5ddb-8d3b-18a68fcd20ef) |
|---|---|
| Product | Smart Slider 3 (0b04fd46-738b-5c29-9f26-2d0016926fc9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-9197 |
vulnerable | 2026-06-08 08:08:58.865086 |
Smart Slider 3 <= 3.5.1.36 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'src'/'srcset' Attribute in HTML Export
MEDIUM (4.9)
The Smart Slider 3 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.5.1.36 via the replaceHTMLImage function. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
Published: 2026-06-06T02:28:33.849Z
Updated: 2026-06-06T11:44:12.835Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4065 |
vulnerable | 2026-06-08 08:05:12.559809 |
Smart Slider 3 <= 3.5.1.33 - Missing Authorization to Authenticated (Contributor+) Slider Data Read and Image Record Manipulation
MEDIUM (5.4)
The Smart Slider 3 plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on multiple wp_ajax_smart-slider3 controller actions in all versions up to, and including, 3.5.1.33. The display_admin_ajax() method does not call checkForCap() (which requires unfiltered_html capability), and several controller actions only validate the nonce (validateToken()) without calling validatePermission(). This makes it possible for authenticated attackers, with Contributor-level access and above, to enumerate slider metadata and create, modify, and delete image storage records by obtaining the nextend_nonce exposed on post editor pages.
Published: 2026-04-07T21:26:20.357Z
Updated: 2026-04-08T16:53:07.718Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3098 |
vulnerable | 2026-06-08 08:01:17.730326 |
Smart Slider 3 <= 3.5.1.33 - Authenticated (Subscriber+) Arbitrary File Read via actionExportAll
MEDIUM (6.5)
The Smart Slider 3 plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.5.1.33 via the 'actionExportAll' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
Published: 2026-03-27T03:37:07.618Z
Updated: 2026-04-08T17:29:18.084Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6348 |
vulnerable | 2026-06-08 07:43:14.885810 |
Smart Slider 3 <= 3.5.1.28 - Authenticated (Administrator+) SQL Injection via `sliderid` Parameter
MEDIUM (4.9)
The Smart Slider 3 plugin for WordPress is vulnerable to time-based SQL Injection via the ‘sliderid’ parameter in all versions up to, and including, 3.5.1.28 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Published: 2025-07-30T08:23:02.026Z
Updated: 2026-04-08T16:37:38.166Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3027 |
vulnerable | 2026-06-08 06:41:52.240751 |
Smart Slider 3 <= 3.5.1.22 - Missing Authorization to Limited File Upload
MEDIUM (6.4)
The Smart Slider 3 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the upload function in all versions up to, and including, 3.5.1.22. This makes it possible for authenticated attackers, with contributor-level access and above, to upload files, including SVG files, which can be used to conduct stored cross-site scripting attacks.
Published: 2024-04-13T01:57:49.676Z
Updated: 2026-04-08T17:09:14.454Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.