Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
smart-slider-3
WordPress
· Plugin
13 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Smart Slider 3 <= 3.5.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-href' Attribute in Custom HTML Block
CVE-2026-14876
smart-slider-3
WordPress
Medium
Fix reported
2026-09-30
Smart Slider 3 <= 3.5.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slider' Block Attribute
CVE-2026-15798
smart-slider-3
WordPress
Medium
Fix reported
2026-08-28
Smart Slider 3 <= 3.5.1.37 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via WP_Query Parameter Injection via 'keyword' Parameter
CVE-2026-12385
smart-slider-3
WordPress
Medium
Fix reported
2026-07-13
Smart Slider 3 <= 3.5.1.36 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'src'/'srcset' Attribute in HTML Export
CVE-2026-9197
smart-slider-3
WordPress
Medium
Fix reported
2026-06-06
Smart Slider 3 <= 3.5.1.33 - Missing Authorization to Authenticated (Contributor+) Slider Data Read and Image Record Manipulation
CVE-2026-4065
smart-slider-3
WordPress
Medium
Fix reported
2026-04-08
Smart Slider 3 <= 3.5.1.33 - Authenticated (Subscriber+) Arbitrary File Read via actionExportAll
CVE-2026-3098
smart-slider-3
WordPress
Medium
Fix reported
2026-04-06
Smart Slider 3 <= 3.5.1.28 - Authenticated (Administrator+) SQL Injection via `sliderid` Parameter
CVE-2025-6348
smart-slider-3
WordPress
Medium
Fix reported
2025-07-30
Smart Slider 3 <= 3.5.1.22 - Missing Authorization to Limited File Upload
CVE-2024-3027
smart-slider-3
WordPress
Medium
Fix reported
2024-04-13
Smart Slider 3 <= 3.5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2022-45843
smart-slider-3
WordPress
Medium
Fix reported
2024-01-22
Smart Slider 3 <= 3.5.1.9 - Authenticated (Contributor+) PHP Object Injection
CVE-2022-45845
smart-slider-3
WordPress
High
Fix reported
2024-01-22
Smart Slider 3 <= 3.5.0.8 - Authenticated Stored Cross-Site Scripting
CVE-2021-24382
smart-slider-3
WordPress
Medium
Fix reported
2024-01-22
Smart Slider 3 <= 3.5.1.9 - PHP Object Injection
CVE-2022-3357
smart-slider-3
WordPress
High
Fix reported
2024-01-22
Smart Slider 3 <= 3.5.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2023-0660
smart-slider-3
WordPress
Medium
Fix reported
2024-01-22
