MEDIUMVulnerability
Global

Backdoored Smart Slider 3 Pro Update Distributed via Compromised Nextend Servers

·Source: The Hacker News

Updated:

Executive Summary

Unknown threat actors have hijacked the update system for the Smart Slider 3 Pro plugin for WordPress and Joomla to push a poisoned version containing a backdoor. The incident impacts Smart Slider 3 Pro version 3.5.1.35 for WordPress, per WordPress security company Patchstack. Smart Slider 3 is a popular WordPress slider plugin with more than 800,000 active installations across its free and Pro

Analysis

Unknown threat actors have hijacked the update system for the Smart Slider 3 Pro plugin for WordPress and Joomla to push a poisoned version containing a backdoor. The incident impacts Smart Slider 3 Pro version 3.5.1.35 for WordPress, per WordPress security company Patchstack. Smart Slider 3 is a popular WordPress slider plugin with more than 800,000 active installations across its free and Pro

Indicators of Compromise (1)

Source Attribution

Originally published by The Hacker News on Apr 10, 2026.

Related Threats

CRITICALVulnerability

How to Identify Compromised eMudhra Certificates With Qualys (CVE-2026-111943 and CVE-2026-111944)

Executive Summary A critical certificate authority incident disclosed on October 17, 2026, impacts eight eMudhra intermediate CA certificates. A flaw in the key generation process could allow attackers to recover private keys and issue fraudulent TLS or code-signing certificates. The affected intermediates have been revoked and blocked by major platform vendors, including Chrome, Mozilla, Apple, [

CVE-2026-111943CVE-2026-111944
Qualys Blog
LOWVulnerability

Analysts Urge US to Follow UK's Lead on Undersea Cable Law

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/analysts-urge-us-to-follow-uks-lead-on-undersea-cable-law-image_small-2-a-33198.jpg" align=right hspace=4><b>UK Proposes Crisis Powers Over Cable Operators and Up to 14 Years for Sabotage</b><br>Security analysts say Washington should update its 1888 undersea cable law after London proposed letting ministers direct cable operators

Bank Info Security
LOWVulnerability

Why HR Belongs at the Center of AI Change

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/hr-belongs-at-center-ai-change-image_small-7-a-33196.jpg" align=right hspace=4><b>Netskope Exec Mike Anderson on Trust, Training and Change Management</b><br>AI adoption can unsettle employees who fear being replaced, even as leaders expect them to use new tools. Netskope CDIO Mike Anderson explains why CIOs should work with HR on

Bank Info Security