WordPress Plugin Vulnerabilities

Smart Slider 3 Pro 3.5.1.35 - Compromised Plugin

Description

A security breach affected the update system responsible for distributing the Smart Slider 3 Pro plugin for WordPress. Unauthorized parties released a malicious version 3.5.1.35, creating a rogue admin user (email: kiziltxt2@gmail.com) as well as persistent access in various locations

Affects Plugins

Plugin icon
nextend-smart-slider3-pro
Fixed in 3.5.1.36

References

URL
https://smartslider.helpscoutdocs.com/article/2144-wordpress-security-advisory-smart-slider-3-pro-3-5-1-35-compromise

Miscellaneous

Verified
Yes
WPVDB ID
e1db44ac-5ab9-4245-8f63-3878025c04e2

Timeline

Publicly Published
2026-04-07 (about 3 months ago)
Added
2026-04-07 (about 3 months ago)
Last Updated
2026-07-08 (about 4 hours ago)

Other

Published
Title
Published
2014-07-29
Title
Beefbind - BeEF RCE Plugin
Published
2020-04-22
Title
M-Shield & kingof - Fake Malware Backdoor Plugins
Published
2026-06-16
Title
Uncanny Automator Pro 7.3.0.5 - Backdoor via Compromised Vendor Update Server
Published
2017-12-28
Title
No Follow All External Links 2.1.0-2.3.0 (current) - Backdoored
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes