Smart Slider 3 Pro 3.5.1.35 - Backdoor Embedded via Supply Chain Compromise
criticalThe Smart Slider 3 Pro plugin for WordPress contains a malicious backdoor in version 3.5.1.35. This is due to a supply chain compromise that resulted in malicious copies of Smart Slider 3 Pro being installed on sites. This makes it possible for unauthenticated attackers to gain root access to a compromised site.
- CVSS:
- 9.8
- Affected:
- 3.5.1.35 – 3.5.1.35
- Fixed in:
- 3.5.1.36
- Disclosed:
- Apr 8, 2026