nextendweb Smart Slider

2 known vulnerabilities in nextendweb Smart Slider, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-14876 CVSS 6.4 medium The Smart Slider 3 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data-href' parameter in all versions up to…
CVE-2026-15798 CVSS 6.4 medium The Smart Slider 3 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'slider' Block Attribute in all versions up to…