CVE-2026-15798

Smart Slider 3 for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via the 'slider' Block Attribute in all versions up to and including 3.5.1.38 , caused by insufficient input sanitization and output escaping. An authenticated attacker with contributor-level access or higher can inje...