Skip to main content
mySites.guru
5+ live

Joomla extension security alerts (22 Aug) Fabrik 4.7.2ZOO: unauth RCEPhoca Cart: unauth SQLiJCE 2.9.99.10SP Page Builder RCE

Smart Slider 3 Pro security vulnerabilities

mySites.guru tracks 2vulnerabilities in smartslider3. Every connected Joomla site is checked against them on each audit, and flagged if it runs an affected version.

What we check for

CriticalCVE-2026-344242026-04-08

CRITICAL: Smart Slider 3 Pro 3.5.1.35 is a COMPROMISED build - treat this site as HACKED

Affected versions: exactly 3.5.1.35

Medium2026-03-27

Smart Slider 3 <= 3.5.1.33 - Authenticated (Subscriber+) Arbitrary File Read via actionExportAll

Affected versions: ≥ 1.999.999 and ≤ 3.5.1.33

Running Smart Slider 3 Pro on a site you manage?

A free audit tells you which of your Joomla and WordPress sites run an affected version, which are out of date, and which have not been backed up. No card required. If a site is already compromised, fix.mysites.guru is a single fixed fee per incident, usually resolved the same day.

CVE identifiers: CVE-2026-34424. Rules current as of 24 August 2026.