WordPress Plugin Vulnerabilities

Smart Slider 3 Pro 3.5.1.35 - Compromised Plugin

Description

A security breach affected the update system responsible for distributing the Smart Slider 3 Pro plugin for WordPress. Unauthorized parties released a malicious version 3.5.1.35, creating a rogue admin user (email: kiziltxt2@gmail.com) as well as persistent access in various locations

Affects Plugins

Plugin icon
nextend-smart-slider3-pro
Fixed in 3.5.1.36

References

URL
https://smartslider.helpscoutdocs.com/article/2144-wordpress-security-advisory-smart-slider-3-pro-3-5-1-35-compromise

Miscellaneous

Verified
Yes
WPVDB ID
e1db44ac-5ab9-4245-8f63-3878025c04e2

Timeline

Publicly Published
2026-04-07 (about 2 days ago)
Added
2026-04-07 (about 2 days ago)
Last Updated
2026-04-07 (about 1 day ago)

Other

Published
Title
Published
2020-04-22
Title
M-Shield & kingof - Fake Malware Backdoor Plugins
Published
2017-09-10
Title
Display Widgets 2.6.0-2.6.3.1 - Backdoored
Published
2014-07-29
Title
Beefbind - BeEF RCE Plugin
Published
2025-07-11
Title
GravityForms 2.9.11.1 / 2.9.12 - Malware Compromise
Published
2024-06-24
Title
Various Plugins - Injected Backdoor