Known Vulnerabilities for products from Nextendweb

Listed below are 4 of the newest known vulnerabilities associated with the vendor "Nextendweb".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2025-58031 Not Provided 2025-09-22 2026-04-01
CVE-2021-24382 The Smart Slider 3 Free and pro WordPress plugins before 3.5.0.9 did not sanitise the Project Name before outputting it back ... 5.4 - MEDIUM 2021-06-14 2021-06-22
CVE-2015-4557 Cross-site scripting (XSS) vulnerability in the new_Twitter_sign_button function in nextend-Twitter-connect.php in the Nexten... 6.1 - MEDIUM 2018-04-12 2018-05-16
CVE-2015-4413 Cross-site scripting (XSS) vulnerability in the new_fb_sign_button function in nextend-facebook-connect.php in Nextend Facebo... 4.3 - MEDIUM 2015-06-24 2019-06-25
CVE-2014-8800 Cross-site scripting (XSS) vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before 1.5.1... 4.3 - MEDIUM 2014-12-05 2014-12-05

Known software with vulnerabilities from Nextendweb

Type Vendor Product Version
ApplicationNextendwebFacebook Connect1.0
ApplicationNextendwebNextend Facebook Connect1.5.0
ApplicationNextendwebNextend Twitter Connect1.0