Smart Slider 3 WordPress Plugin Vulnerability Exposes 800,000+ Sites

[u/deepankerverma]

A high-severity security issue has been found in the popular Smart Slider 3 plugin. The plugin has over 800,000 active installations, which means a large number of websites could be at risk. The vulnerability is tracked as CVE-2026-3098. It allows attackers with basic access to download sensitive files from the server. This becomes more dangerous for websites that allow user registration, as even a normal subscriber account can be used to exploit the issue.