CVE-2026-49777

CRITICAL

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4.

StatusDeferred

설명

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted.

This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4.

Score Summary

CVSS Score: 10.0
Version: 3.1
VPI: 100
Why this VPI (explainable, experimental)
VPI breakdown
Impact 100.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 100.00
VPI formula vpi-v1
EPSS: 1.7%
(상위 74.0%)
Attack Vector: Network
Low Complexity
No Privileges
No User Interaction
Scope Changed
High Confidentiality Impact
High Integrity Impact
High Availability Impact

Details

Published: 06/05/2026(2 months ago)
Modified: 06/08/2026(last month)
Source: NVD

CWE Weakness Classification

CWE-1284
NVD
Secondary

References (1)

NVD
https://patchstack.com/database/wordpress/plugin/woo-product-slider-pro/vulnerability/wordpress-product-slider-pro-for-woocommerce-plugin-3-5-2-backdoor-vulnerability?_s_id=cve

목록으로

Dashboard

Vulnerabilities

Impact	100.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	100.00