Smart Slider 3 Arbitrary File Read Vulnerability for WordPress

A vulnerability allowing arbitrary file read has been identified in the Smart Slider 3 plugin for WordPress, affecting all versions through 3.5.1.33. The issue arises in the 'actionExportAll' function, where authenticated attackers with Subscriber-level access and above can read the contents of arbitrary files on the server, potentially exposing sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information stored in files on the server.

Remediation

Users are advised to update the Smart Slider 3 plugin to version 3.5.1.34 or a newer patched version.