CVE-2026-49777CWE-1284

WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability

Critical · published June 5, 2026

CVSS v3.1
10.0
EPSS
2%
Percentile
80.8
In the wild
Unconfirmed
What it is

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted.

This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4.

The record
Technical detail
CVSS v3.1
10.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02025 · 80.8th percentile
Weakness
CWE-1284 · Improper Validation of Specified Quantity in Input
Published
2026-06-05T08:59Z
EPSS history
Timeline
  • 05 JUN 08:59Z
    WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability
    cvelistv5