Skip to content
OpenAdvisories

Vendor

nextendweb

14 known vulnerabilities.

Products

Smart Slider 3 8 Nextend Social Login Pro 2 Nextend Social Login and Register 2 Nextend Facebook Connect 1 Smart Slider 3 Pro for WordPress 1 Smart Slider 3 Pro for Joomla 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-3098 Public exploit

    Smart Slider 3 <= 3.5.1.33 - Authenticated (Subscriber+) Arbitrary File Read via actionExportAll

    The Smart Slider 3 plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.5.1.33 via the 'actionExportAll' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read…

    nextendweb Smart Slider 3 Web / CMS