Read the docs

nextendweb

Records22All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

nextendweb records in CISA KEV

No nextendweb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Smart Slider 3 4 records HIGH Facebook Connect 1 record LOW Nextend Facebook Connect 1 record LOW Nextend Social Login 1 record LOW Nextend Twitter Connect 1 record LOW Smart Slider 1 record LOW

Records

4 records in Smart Slider 3 · all components

TI-2022-03102 CVE-2022-3357 · GHSA-whq7-7399-vqph

Smart Slider 3 < 3.5.1.11 - PHP Object Injection

Priority HIGH 73

The Smart Slider 3 WordPress plugin before 3.5.1.11 unserialises the content of an imported file, which could lead to PHP object injection issues when a user import (intentionally or not) a malicious file, and a suitable…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02487 Published 2022-10-31 Fixed in 3.5.1.11 CWE-502
TI-2023-00625 CVE-2023-0660 · GHSA-mpxm-83cm-m75h

Smart Slider 3 < 3.5.1.14 - Contributor+ Stored XSS

Priority MEDIUM 58

The Smart Slider 3 WordPress plugin before 3.5.1.14 does not properly validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00478 Published 2023-03-27 Fixed in 3.5.1.14
Open these records in search →