CVE-2015-3634: The SlideshowPluginSlideshowStylesheet::loadStylesheetByAJAX function in the Slideshow plugin 2.2.8 through...

Security readout for executives and security teams

This issue affects the WordPress Slideshow plugin versions 2.2.8 through 2.2.21. A remote attacker could read arbitrary WordPress option values, which may expose configuration data stored by WordPress or plugins. The sources do not provide CVSS, public exploit, or active exploitation evidence. Exposure is limited to WordPress sites running the Slideshow plugin versions 2.2.8 through 2.2.21. Internet-facing WordPress sites are the main concern. The sources do not identify affected CPEs or confirm whether authentication is required. Prioritize remediation for public WordPress sites using the affected plugin. This is not evidenced as actively exploited, but it can disclose internal site configuration and may increase risk if sensitive values are stored in WordPress options. Mitigation focus: Inventory WordPress sites for the Slideshow plugin and affected versions.; Update the plugin beyond 2.2.21 if vendor guidance confirms the fix.; Disable or remove the plugin where it is unused or unsupported..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.