Paper/Archive/CVE-2026-49777

CVE-2026-49777

ShapedPlugin, LLC Product Slider Pro for WooCommerce — WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability

EPSS 2%CVSS 10.0

critical.is priorityof 100

CVSS 10.0 (CNA)10.0 / 10 × 3030.0 Not in CISA KEV+300.0 EPSS percentile 76.6.766 × 2015.3 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4.

Affected

ProductAffectedFixed inSource

Product Slider Pro for WooCommercen/a – < 3.5.43.5.4CNA

Scores by source

Patchstack (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refpatchstack.com/database/wordpress/plugin/woo-product-slider-pro/vulnerability/wordpress-product-slider-pro-for-woocommerce-plugin-3-5-2-backdoor-vulnerability?_s_id=cve