CVE-2026-12385
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
The Smart Slider 3 plugin for WordPress up to version 3.5.1.37 inclusive is vulnerable to Sensitive Information Exposure via the 'keyword' parameter. This allows authenticated attackers with contributor-level access or higher to extract titles and full content excerpts of private, draft, pending, trashed, and auto-draft posts from any user, including Administrators and Editors.
Risk Assessment
The organization risks exposure of confidential content, which may contain sensitive data, business plans, or non-public information, potentially leading to a breach of confidentiality and loss of trust.
Recommendation
Immediately update the Smart Slider 3 plugin to the latest available version that fixes this vulnerability. Restrict access to the WordPress admin panel to trusted users only.
Other vulnerabilities in Smart Slider 3
See all- CVE-2026-15798Medium
The Smart Slider 3 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slider' Block Attribute in all versions up to and including 3.5.1.38 due to insufficient input sanitization and output escaping. This allows authenticated attackers with contributor-level access and above to inject arbitrary web scripts that execute when a user accesses an injected page. The scripts execute specifically when a user opens the affected post in the WordPress block editor, making Editors and Administrators the primary targets.
- CVE-2026-9197Medium
The Smart Slider 3 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.5.1.36 via the replaceHTMLImage function. This allows authenticated attackers with administrator-level access or above to read the contents of arbitrary files on the server, which may contain sensitive information.
- CVE-2026-4065Medium
The Smart Slider 3 plugin for WordPress up to version 3.5.1.33 fails to check proper capabilities in multiple AJAX controller actions. Missing checkForCap() and validatePermission() calls allow authenticated attackers with Contributor-level access and above to enumerate slider metadata and create, modify, and delete image storage records.
Original NVD description (English source)
The Smart Slider 3 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.1.37 via the 'keyword' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to extract titles and full content excerpts of private, draft, pending, trashed, and auto-draft posts authored by any user, including Administrators and Editors. The required nonce is emitted on /wp-admin/post-new.php, which is accessible to Contributor-level users via the edit_posts capability, meaning any Contributor can obtain the nonce needed to trigger the injection.