Plugin icon

Smart Slider 3

smart-slider-3

Vulnerabilities:

12

Last Updated:

August 19, 2026

Active Installs:

800000

Published
Title
Fixed in
CVSS
Published
2026-09-29
Title
Smart Slider 3 < 3.5.1.39 - Contributor+ Stored XSS via 'data-href' Attribute in Custom HTML Block
Fixed in
Fixed in 3.5.1.39
CVSS
5.5 (medium)
Published
2026-08-27
Title
Smart Slider 3 < 3.5.1.39 - Contributor+ Stored XSS via 'slider' Block Attribute
Fixed in
Fixed in 3.5.1.39
CVSS
6.8 (medium)
Published
2026-07-13
Title
Smart Slider 3 < 3.5.1.38 - Contributor+ Sensitive Information Exposure via keyword Parameter
Fixed in
Fixed in 3.5.1.38
CVSS
2.7 (low)
Published
2026-06-05
Title
Smart Slider 3 < 3.5.1.37 - Admin+ Path Traversal to Arbitrary File Read via HTML Export
Fixed in
Fixed in 3.5.1.37
CVSS
4.9 (medium)
Published
2026-04-07
Title
Smart Slider 3 < 3.5.1.34 - Contributor+ Slider Data Read and Image Record Manipulation
Fixed in
Fixed in 3.5.1.34
CVSS
3.8 (low)
Published
2026-03-26
Title
Smart Slider 3 < 3.5.1.34 - Subscriber+ Arbitrary File Read via actionExportAll
Fixed in
Fixed in 3.5.1.34
CVSS
6.5 (medium)
Published
2025-07-29
Title
Smart Slider 3 < 3.5.1.29 - Admin+ SQL Injection
Fixed in
Fixed in 3.5.1.29
CVSS
4.9 (medium)
Published
2024-04-12
Title
Smart Slider 3 < 3.5.1.23 - Contributor+ Stored XSS via SVG Upload
Fixed in
Fixed in 3.5.1.23
CVSS
6.4 (medium)
Published
2023-02-28
Title
Smart Slider 3 < 3.5.1.14 - Contributor+ Stored XSS
Fixed in
Fixed in 3.5.1.14
CVSS
6.8 (medium)
Published
2022-11-23
Title
Smart Slider 3 < 3.5.1.11 - Contributor+ Stored XSS
Fixed in
Fixed in 3.5.1.11
CVSS
6.8 (medium)
Published
2022-10-10
Title
Smart Slider 3 < 3.5.1.11 - PHP Object Injection
Fixed in
Fixed in 3.5.1.11
CVSS
5.8 (medium)
Published
2021-06-07
Title
Smart Slider 3 < 3.5.0.9 - Authenticated Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 3.5.0.9
CVSS
4.8 (medium)