Arbitrary File Read Vulnerability in Smart Slider 3 Plugin for WordPress

CVE-2026-3098

What is CVE-2026-3098?

The Smart Slider 3 plugin for WordPress features an Arbitrary File Read vulnerability which allows authenticated attackers with subscriber-level access or higher to access sensitive information stored within files on the server. This issue arises through the 'actionExportAll' function in versions 3.5.1.33 and below, posing a significant risk to site security. Website administrators should consider updating the plugin or implementing security measures to mitigate potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References