SS
Product
Smart Slider 3
12
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 2Medium 10Low 0
Watch
Add Smart Slider 3 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-45845 | 8.8 | Jan 19 | WordPress Smart Slider 3 Plugin <= 3.5.1.9 is vulnerable to PHP Object Injection Affected: before 3.5.1.11 |
| CVE-2022-3357 | 8.8 | Oct 31 | Smart Slider 3 < 3.5.1.11 - PHP Object Injection Affected: before 3.5.1.11 |
| CVE-2026-3098 | 6.5 | Mar 27 | Smart Slider 3 <= 3.5.1.33 - Authenticated (Subscriber+) Arbitrary File Read via actionExportAll Affected: through 3.5.1.33 |
| CVE-2026-14876 | 6.4 | Sep 30 | Smart Slider 3 <= 3.5.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-href' Attribute in Custom HTML Block Affected: through 3.5.1.38 |
| CVE-2026-15798 | 6.4 | Aug 28 | Smart Slider 3 <= 3.5.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slider' Block Attribute Affected: through 3.5.1.38 |
| CVE-2024-3027 | 6.4 | Apr 13 | Smart Slider 3 <= 3.5.1.22 - Missing Authorization to Limited File Upload Affected: through 3.5.1.22 |
| CVE-2026-4065 | 5.4 | Apr 7 | Smart Slider 3 <= 3.5.1.33 - Missing Authorization to Authenticated (Contributor+) Slider Data Read and Image Record Manipulation Affected: through 3.5.1.33 |
| CVE-2023-0660 | 5.4 | Mar 27 | Smart Slider 3 < 3.5.1.14 - Contributor+ Stored XSS Affected: before 3.5.1.14 |
| CVE-2022-45843 | 5.4 | Mar 23 | WordPress Smart Slider 3 Plugin <= 3.5.1.9 is vulnerable to Cross Site Scripting (XSS) Affected: before 3.5.1.11 |
| CVE-2026-9197 | 4.9 | Jun 6 | Smart Slider 3 <= 3.5.1.36 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'src'/'srcset' Attribute in HTML Export Affected: through 3.5.1.36 |
| CVE-2025-6348 | 4.9 | Jul 30 | Smart Slider 3 <= 3.5.1.28 - Authenticated (Administrator+) SQL Injection via `sliderid` Parameter Affected: through 3.5.1.28 |
| CVE-2026-12385 | 4.3 | Jul 13 | Smart Slider 3 <= 3.5.1.37 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via WP_Query Parameter Injection via 'keyword' Parameter Affected: through 3.5.1.37 |
Showing 12