agentprime: nextendweb-smart-slider-3Every new CVE for nextendweb-smart-slider-3.https://agentprime.io/CVE-2026-14876: Smart Slider 3 <= 3.5.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-href' Attribute in Custom HTML Blockhttps://agentprime.io/advisories/CVE-2026-14876/https://agentprime.io/advisories/CVE-2026-14876/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 07:41:05 GMTCVECVE-2026-15798: Smart Slider 3 <= 3.5.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slider' Block Attributehttps://agentprime.io/advisories/CVE-2026-15798/https://agentprime.io/advisories/CVE-2026-15798/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 02:26:57 GMTCVECVE-2026-12385: Smart Slider 3 <= 3.5.1.37 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via WP_Query Parameter Injection via 'keyword' Parameterhttps://agentprime.io/advisories/CVE-2026-12385/https://agentprime.io/advisories/CVE-2026-12385/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Jul 2026 19:33:56 GMTCVECVE-2026-9197: Smart Slider 3 <= 3.5.1.36 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'src'/'srcset' Attribute in HTML Exporthttps://agentprime.io/advisories/CVE-2026-9197/https://agentprime.io/advisories/CVE-2026-9197/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 06 Jun 2026 02:28:33 GMTCVECVE-2026-4065: Smart Slider 3 <= 3.5.1.33 - Missing Authorization to Authenticated (Contributor+) Slider Data Read and Image Record Manipulationhttps://agentprime.io/advisories/CVE-2026-4065/https://agentprime.io/advisories/CVE-2026-4065/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 21:26:20 GMTCVECVE-2026-3098: Smart Slider 3 <= 3.5.1.33 - Authenticated (Subscriber+) Arbitrary File Read via actionExportAllhttps://agentprime.io/advisories/CVE-2026-3098/https://agentprime.io/advisories/CVE-2026-3098/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 03:37:07 GMTCVECVE-2025-6348: Smart Slider 3 <= 3.5.1.28 - Authenticated (Administrator+) SQL Injection via `sliderid` Parameterhttps://agentprime.io/advisories/CVE-2025-6348/https://agentprime.io/advisories/CVE-2025-6348/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Jul 2025 08:23:02 GMTCVECVE-2024-3027: Smart Slider 3 <= 3.5.1.22 - Missing Authorization to Limited File Uploadhttps://agentprime.io/advisories/CVE-2024-3027/https://agentprime.io/advisories/CVE-2024-3027/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 13 Apr 2024 01:57:49 GMTCVE