CVE-2026-49777
WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability
- Published
- Jun 5, 2026
- Updated
- Jun 8, 2026
- Assigning CNA
- Patchstack
- Evidence observed
- Aug 8, 2026
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HLow · next 30 days
- Percentile
- 80.7%
- Model date
- Oct 17, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4.
Sources
http/cves/2026/CVE-2026-49777.yaml
Nuclei TemplatesDeclared conditions
- network: http($.protocol_keys)
- verification: dsl,word($.matchers[*].type)
Professional vulnerability assessment report for WooCommerce plugin supply-chain risk, including business impact, remediation, and mitigation strategy.
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.