Login Request a demo
NE
Vendor
nextendweb
10 products with CVEs on record
24
CVEs
0
On KEV
0
New 30D
Products
SS
Smart Slider 3
nextendweb
8.8
12 CVEs0 on KEV0 new
NF
Nextend Facebook Connect
Nextendweb
6.5
2 CVEs0 on KEV0 new
NS
Nextend Social Login and Register
nextendweb
5.4
2 CVEs0 on KEV0 new
NS
Nextend Social Login Pro
nextendweb
9.8
2 CVEs0 on KEV0 new
FC
Facebook Connect
Nextendweb
–
1 CVEs0 on KEV0 new
NS
Nextend Social Login
Nextendweb
5.4
1 CVEs0 on KEV0 new
NT
Nextend Twitter Connect
Nextendweb
6.1
1 CVEs0 on KEV0 new
SS
Smart Slider
Nextendweb
5.4
1 CVEs0 on KEV0 new
SS
Smart Slider 3 Pro for Joomla
Nextendweb
9.8
1 CVEs0 on KEV0 new
SS
Smart Slider 3 Pro for WordPress
Nextendweb
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-14876
SS
Smart Slider 3
nextendweb
6.4
0%
Sep 30Smart Slider 3 <= 3.5.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-href' Attribute in Custom HTML Block
CVE-2026-15798
SS
Smart Slider 3
nextendweb
6.4
0%
Aug 28Smart Slider 3 <= 3.5.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slider' Block Attribute
CVE-2026-12385
SS
Smart Slider 3
nextendweb
4.3
0%
Jul 13Smart Slider 3 <= 3.5.1.37 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via WP_Query Parameter Injection via 'keyword' Parameter
CVE-2026-9197
SS
Smart Slider 3
nextendweb
4.9
1%
Jun 6Smart Slider 3 <= 3.5.1.36 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'src'/'srcset' Attribute in HTML Export
CVE-2026-34424
SS
Smart Slider 3 Pro for Joomla
Nextendweb
9.8
1%
Apr 9Smart Slider 3 Pro 3.5.1.35 Supply Chain Attack Remote Access Toolkit
CVE-2026-4065
SS
Smart Slider 3
nextendweb
5.4
0%
Apr 7Smart Slider 3 <= 3.5.1.33 - Missing Authorization to Authenticated (Contributor+) Slider Data Read and Image Record Manipulation
CVE-2026-3098
SS
Smart Slider 3
nextendweb
6.5
0%
Mar 27Smart Slider 3 <= 3.5.1.33 - Authenticated (Subscriber+) Arbitrary File Read via actionExportAll
CVE-2025-13737
NS
Nextend Social Login and Register
nextendweb
4.3
0%
Nov 28Nextend Social Login and Register <= 3.1.21 - Cross-Site Request Forgery to Unlink User Social Login
CVE-2025-58031
NF
Nextend Facebook Connect
Nextendweb
6.5
0%
Sep 22WordPress Nextend Facebook Connect Plugin <= 3.1.19 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-6348
SS
Smart Slider 3
nextendweb
4.9
0%
Jul 30Smart Slider 3 <= 3.5.1.28 - Authenticated (Administrator+) SQL Injection via `sliderid` Parameter
CVE-2025-1061
NS
Nextend Social Login Pro
nextendweb
9.8
1%
Feb 7Nextend Social Login Pro <= 3.1.16 - Authentication Bypass via Apple OAuth provider
CVE-2024-9893
NS
Nextend Social Login Pro
nextendweb
9.8
1%
Oct 16Nextend Social Login Pro <= 3.1.14 - Authentication Bypass via WordPress.com OAuth provider
CVE-2024-3027
SS
Smart Slider 3
nextendweb
6.4
0%
Apr 13Smart Slider 3 <= 3.5.1.22 - Missing Authorization to Limited File Upload
CVE-2024-1775
NS
Nextend Social Login and Register
nextendweb
5.4
0%
Mar 2Nextend Social Login and Register <= 3.1.12 - Reflected Self-Based Cross-Site Scripting via error_description
CVE-2022-45845
SS
Smart Slider 3
Nextendweb
8.8
1%
Jan 19WordPress Smart Slider 3 Plugin <= 3.5.1.9 is vulnerable to PHP Object Injection
CVE-2023-0660
SS
Smart Slider 3
Nextendweb
5.4
0%
Mar 27Smart Slider 3 < 3.5.1.14 - Contributor+ Stored XSS
CVE-2022-45843
SS
Smart Slider 3
Nextendweb
5.4
0%
Mar 23WordPress Smart Slider 3 Plugin <= 3.5.1.9 is vulnerable to Cross Site Scripting (XSS)
CVE-2022-3357
SS
Smart Slider 3
Nextendweb
8.8
2%
Oct 31Smart Slider 3 < 3.5.1.11 - PHP Object Injection
CVE-2021-24382
SS
Smart Slider
Nextendweb
5.4
1%
Jun 14The Smart Slider 3 Free and pro WordPress plugins before 3.5.0.9 did not sanitise the Project Name before outputting it back in the page, leading to a Stored Cross-Site Scripting…
CVE-2015-4557
NT
Nextend Twitter Connect
Nextendweb
6.1
2%
Apr 12Cross-site scripting (XSS) vulnerability in the new_Twitter_sign_button function in nextend-Twitter-connect.php in the Nextend Twitter Connect plugin before 1.5.2 for WordPress…
CVE-2015-4413
FC
Facebook Connect
Nextendweb
–
3%
Jun 24Cross-site scripting (XSS) vulnerability in the new_fb_sign_button function in nextend-facebook-connect.php in Nextend Facebook Connect plugin before 1.5.6 for WordPress allows…
CVE-2014-8800
NF
Nextend Facebook Connect
Nextendweb
–
4%
Dec 5Cross-site scripting (XSS) vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before 1.5.1 for WordPress allows remote attackers to inject…