Vulnerabilidades de Nextendweb
CVEs publicadas que afetam produtos de Nextendweb: 6 registro(s), com severidade, exploração e correções.
Smart Slider 3 3Nextend Social Login and Register 1Smart Slider 3 Pro for WordPress 1Smart Slider 3 Pro for Joomla 1Nextend Facebook Connect 1
CVE-2026-9197
Média · 4.9
CWE-22 06/06/2026
Smart Slider 3 <= 3.5.1.36 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'src'/'srcset' Attribute in HTML Export
The Smart Slider 3 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.5.1.36 via the replaceHTMLImage function. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
CVE-2026-34424
Crítica · 9.8
CWE-506 09/04/2026
Kit de backdoor por cadeia de suprimentos no Smart Slider 3 Pro para WordPress e Joomla
O Smart Slider 3 Pro versão 3.5.1.35 para WordPress e Joomla contém um kit de acesso remoto em múltiplas etapas, injetado por meio de um sistema de atualização comprometido, que permite que atacantes não autenticados executem código e comandos arbitrários. Atacantes podem acionar execução de shell remoto anterior à autenticação por meio de cabeçalhos HTTP, estabelecer backdoors autenticados que aceitam código PHP arbitrário ou comandos do sistema operacional, criar contas de administrador ocultas, exfiltrar credenciais e chaves de acesso, e manter persistência por meio de múltiplos pontos de injeção, incluindo must-use plugins e modificações de arquivos do core.
CVE-2026-4065
Média · 5.4
CWE-862 07/04/2026
Smart Slider 3 <= 3.5.1.33 - Missing Authorization to Authenticated (Contributor+) Slider Data Read and Image Record Manipulation
The Smart Slider 3 plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on multiple wp_ajax_smart-slider3 controller actions in all versions up to, and including, 3.5.1.33. The display_admin_ajax() method does not call checkForCap() (which requires unfiltered_html capability), and several controller actions only validate the nonce (validateToken()) without calling validatePermission(). This makes it possible for authenticated attackers, with Contributor-level access and above, to enumerate slider metadata and create, modify, and delete image storage records by obtaining the nextend_nonce exposed on post editor pages.
CVE-2026-3098
Média · 6.5
CWE-862 27/03/2026
Smart Slider 3 <= 3.5.1.33 - Authenticated (Subscriber+) Arbitrary File Read via actionExportAll
The Smart Slider 3 plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.5.1.33 via the 'actionExportAll' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
CVE-2025-13737
Média · 4.3
CWE-352 28/11/2025
Nextend Social Login and Register <= 3.1.21 - Cross-Site Request Forgery to Unlink User Social Login
The Nextend Social Login and Register plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.21. This is due to missing or incorrect nonce validation on the 'unlinkUser' function. This makes it possible for unauthenticated attackers to unlink the user's social login via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVE-2025-58031
Média · 6.5
CWE-79 22/09/2025
WordPress Nextend Facebook Connect Plugin <= 3.1.19 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nextendweb Nextend Facebook Connect nextend-facebook-connect allows Stored XSS.This issue affects Nextend Facebook Connect : from n/a through <= 3.1.19.