Skip to content
PluginCanary

Smart Slider 3

by Nextendweb · 800,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 28 Oct 2026, 13 releases in 24 months, no unpatched vulnerabilities.

87/ 100 Canary Score
Sub-scores for Smart Slider 3
Ownership100
Maintenance100
Security65
SupportNo data
Reputation85

How the score works

Quick answers

Is Smart Slider 3 still maintained?
Yes. Last release 28 Oct 2026, 13 releases in the last 24 months. 28 Oct 2026 · wordpress.org
Who owns Smart Slider 3, and has it changed hands?
No change recorded. Main committer nextendweb since Nov 2015. 4 Nov 2026 · SVN log
Was Smart Slider 3 removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Smart Slider 3 safe?
13 known vulnerabilities, all fixed (latest in 3.5.1.39). Not on the exploited list. 29 Sep 2026 · Wordfence Intelligence
Is the latest Smart Slider 3 update safe to install?
No ownership change before 3.5.1.40. No one-star spike after it. 28 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
nextendweb12 Nov 2015 to 28 Oct 2026, 295 commits

1 committer recorded. No ownership change since 2015.

Maintenance

Last release
7 days ago
Releases, 24 months
13
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter
Releases per quarter for Smart Slider 3
Q1 20240
Q2 20241
Q3 20240
Q4 20243
Q1 20251
Q2 20251
Q3 20251
Q4 20252
Q1 20262
Q2 20261
Q3 20262
Q4 20261

Last release 28 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (2 reviews). Lifetime: 4.9.

Average rating per quarter for Smart Slider 3
Q1 20255.0
Q2 20254.8
Q3 20254.4
Q4 20255.0
Q1 20264.2
Q2 20265.0
Q3 20264.0
Q4 20265.0

Average rating stayed at 5.0 between Q1 2025 and Q4 2026.

Rating distribution
5 star1066
4 star18
3 star5
2 star13
1 star23
Latest low reviews

Security record

7 vulnerabilities in 24 months (13 on record), all patched (latest fixed in 3.5.1.39).

Show 13 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
29 Sep 2026Smart Slider 3 <= 3.5.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-href' Attribute in Custom HTML Block6.4<= 3.5.1.383.5.1.39Patched before disclosure
27 Aug 2026Smart Slider 3 <= 3.5.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slider' Block Attribute6.4<= 3.5.1.383.5.1.39Patched before disclosure
13 Jul 2026Smart Slider 3 <= 3.5.1.37 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via WP_Query Parameter Injection via 'keyword' Parameter4.3<= 3.5.1.373.5.1.38Patched before disclosure
5 Jun 2026Smart Slider 3 <= 3.5.1.36 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'src'/'srcset' Attribute in HTML Export4.9<= 3.5.1.363.5.1.37Patched before disclosure
7 Apr 2026Smart Slider 3 <= 3.5.1.33 - Missing Authorization to Authenticated (Contributor+) Slider Data Read and Image Record Manipulation5.4<= 3.5.1.333.5.1.34Patched before disclosure
26 Mar 2026Smart Slider 3 <= 3.5.1.33 - Authenticated (Subscriber+) Arbitrary File Read via actionExportAll6.5<= 3.5.1.333.5.1.34Patched before disclosure
29 Jul 2025Smart Slider 3 <= 3.5.1.28 - Authenticated (Administrator+) SQL Injection via `sliderid` Parameter4.9<= 3.5.1.283.5.1.29Patched before disclosure
12 Apr 2024Smart Slider 3 <= 3.5.1.22 - Missing Authorization to Limited File Upload6.4<= 3.5.1.223.5.1.23Patched before disclosure
28 Feb 2023Smart Slider 3 <= 3.5.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.5.1.133.5.1.14Patched before disclosure
23 Nov 2022Smart Slider 3 <= 3.5.1.9 - Authenticated (Contributor+) PHP Object Injection8.8<= 3.5.1.93.5.1.11Patched before disclosure
23 Nov 2022Smart Slider 3 <= 3.5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.5.1.93.5.1.11Patched before disclosure
10 Oct 2022Smart Slider 3 <= 3.5.1.9 - PHP Object Injection7.2<= 3.5.1.93.5.1.11Patched before disclosure
7 Jun 2021Smart Slider 3 <= 3.5.0.8 - Authenticated Stored Cross-Site Scripting5.4< 3.5.0.93.5.0.93

Changelog mentions of security fixes: 3.5.1.37 (security); 3.5.1.38 (security); 3.5.1.39 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 3 support threads resolved in the last 2 months.

Momentum

800,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Smart Slider 3
4 May 20268,147
11 May 202624,392
18 May 202623,371
25 May 2026265,939
1 Jun 202657,013
8 Jun 202641,131
15 Jun 202631,228
22 Jun 202625,945
29 Jun 202623,716
6 Jul 2026285,529
13 Jul 202659,222
20 Jul 202639,874
27 Jul 202630,645
3 Aug 202626,705
10 Aug 202621,146
17 Aug 2026284,596
24 Aug 202657,071
31 Aug 202639,698
7 Sep 202626,733
14 Sep 202624,862
21 Sep 202623,389
28 Sep 202620,255
5 Oct 202619,908
12 Oct 202617,835
19 Oct 202628,066
26 Oct 2026288,636
2 Nov 202611,440

Weekly downloads over the last 4 weeks are 29% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Logo CarouselScore 100 · 20,000+GutensliderScore 100 · 10,000+Carousel SliderScore 98 · 30,000+Slider by SoliloquyScore 98 · 30,000+Ovation ElementsScore 98 · 10,000+

Facts

Version3.5.1.40
AuthorNextendweb
Added12 Nov 2015
Last updated28 Oct 2026
Active installs800,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHP7.0
CategoryDesign & Themes > Page Builders & Visual Editors
Tagsslider, gallery, slideshow, image slider, carousel slider

Other plugins by this author: Nextend Social Login and Register, Output Buffer Tester

Questions

Is Smart Slider 3 still maintained?

Yes. Last release 28 Oct 2026, 13 releases in the last 24 months.

Who owns Smart Slider 3, and has it changed hands?

No change recorded. Main committer nextendweb since Nov 2015.

Was Smart Slider 3 removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Smart Slider 3 safe?

13 known vulnerabilities, all fixed (latest in 3.5.1.39). Not on the exploited list.

Is the latest Smart Slider 3 update safe to install?

No ownership change before 3.5.1.40. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue