Skip to content
OpenAdvisories

Vendor

nextendweb

14 known vulnerabilities.

Products

Smart Slider 3 8 Nextend Social Login Pro 2 Nextend Social Login and Register 2 Nextend Facebook Connect 1 Smart Slider 3 Pro for WordPress 1 Smart Slider 3 Pro for Joomla 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-34424

    Smart Slider 3 Pro 3.5.1.35 Supply Chain Attack Remote Access Toolkit

    Smart Slider 3 Pro version 3.5.1.35 for WordPress and Joomla contains a multi-stage remote access toolkit injected through a compromised update system that allows unauthenticated attackers to execute arbitrary code and commands. Attackers can trigger pre-auth…

    nextendweb Smart Slider 3 Pro for WordPress Smart Slider 3 Pro for Joomla Web / CMS
  • Critical 9.8
    CVE-2025-1061

    Nextend Social Login Pro <= 3.1.16 - Authentication Bypass via Apple OAuth provider

    The Nextend Social Login Pro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.1.16. This is due to insufficient verification on the user being supplied during the Apple OAuth authenticate request through the plug…

    nextendweb Nextend Social Login Pro Web / CMS
  • Critical 9.8
    CVE-2024-9893

    Nextend Social Login Pro <= 3.1.14 - Authentication Bypass via WordPress.com OAuth provider

    The Nextend Social Login Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 3.1.14. This is due to insufficient verification on the user being returned by the social login token. This makes it possible for un…

    nextendweb Nextend Social Login Pro Web / CMS