Skip to content
Noroxi

Smart Slider 3

smart-slider-3 · plugin

Known security vulnerabilities for Smart Slider 3. Find out in seconds which version runs on your site with WP Lens.

9 known vulnerabilities

1 with public exploit code · latest Sep 30, 2026

Vulnerabilities

  • CVE-2022-45845

    WordPress Smart Slider 3 Plugin <= 3.5.1.9 is vulnerable to PHP Object Injection

    High 8.8

  • CVE-2026-3098

    Smart Slider 3 <= 3.5.1.33 - Authenticated (Subscriber+) Arbitrary File Read via actionExportAll

    Medium 6.5

  • CVE-2026-14876

    Smart Slider 3 <= 3.5.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-href' Attribute in Custom HTML Block

    Medium 6.4

  • CVE-2026-15798

    Smart Slider 3 <= 3.5.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slider' Block Attribute

    Medium 6.4

  • CVE-2024-3027

    Smart Slider 3 <= 3.5.1.22 - Missing Authorization to Limited File Upload

    Medium 6.4

  • CVE-2026-4065

    Smart Slider 3 <= 3.5.1.33 - Missing Authorization to Authenticated (Contributor+) Slider Data Read and Image Record Manipulation

    Medium 5.4

  • CVE-2022-45843

    WordPress Smart Slider 3 Plugin <= 3.5.1.9 is vulnerable to Cross Site Scripting (XSS)

    Medium 5.4

  • CVE-2026-9197

    Smart Slider 3 <= 3.5.1.36 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'src'/'srcset' Attribute in HTML Export

    Medium 4.9

  • CVE-2026-12385

    Smart Slider 3 <= 3.5.1.37 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via WP_Query Parameter Injection via 'keyword'

    Medium 4.3

← Back to directory