CVE-2026-4065: Smart Slider 3 <= 3.5.1.33 - Missing Authorization to Authenticated (Contributor+) Slider Data Read and Image Record Manipulation
The Smart Slider 3 plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on multiple wpajaxsmart-slider3 controller actions in all versions up to, and including, 3.5.1.33. The displayadminajax() method does not call checkForCap() (which requires unfilteredhtml capability), and several controller actions only validate the nonce (validateToken()) without calling validatePermission(). This makes it possible for authenticated attackers, with Contributor-level access and above, to enumerate slider metadata and create, modify, and delete image storage records by obtaining the nextendnonce exposed on post editor pages.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4065?
CVE-2026-4065 has a medium severity rating due to unauthorized access and possible data manipulation.
How do I fix CVE-2026-4065?
To fix CVE-2026-4065, update the Smart Slider 3 plugin to version 3.5.1.34 or later.
Who is affected by CVE-2026-4065?
Users of Smart Slider 3 versions 3.5.1.33 and earlier on WordPress are affected by CVE-2026-4065.
What type of vulnerability is CVE-2026-4065?
CVE-2026-4065 is a missing authorization vulnerability that allows unauthorized data access and modification.
Can CVE-2026-4065 be exploited remotely?
Yes, CVE-2026-4065 can be exploited remotely by authenticated users with Contributor+ roles.