CVE-2026-14876 | nextendweb Smart Slider 3 Plugin up to 3.5.1.38 on WordPress data-href cross site scripting

A vulnerability identified as problematic has been detected in nextendweb Smart Slider 3 Plugin up to 3.5.1.38 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation of the argument data-href leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-14876. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More