CVE-2026-3098 in Smart Slider 3 Plugin

Sumário (Inglês)

The Smart Slider 3 plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.5.1.33 via the 'actionExportAll' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Responsável

Wordfence

Reservar

24/02/2026

Divulgação

27/03/2026

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
353792	nextendweb Smart Slider 3 Plugin actionExportAll Elevação de Privilégios	862	Não definido	Correção oficial	CVE-2026-3098

Fontes

• MITRE
• NVD
• CVE Details