CVE-2026-49777

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4.

CVSS v3.1

10.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

1.66% chance of exploitation in the next 30 days, 75th percentile

Nuclei

critical · CWE-506

Published

2026-06-05

Updated

2026-06-08

Proof-of-concept exploits (2)

• xxconi/CVE-2026-49777-CVE-2026-107350★ · 2026-06-21
• izxci/CVE-2026-497770★ · 2026-06-12

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-49777.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2025-13407
• CVE-2025-5947
• CVE-2025-6254
• CVE-2026-10735
• CVE-2026-12415
• CVE-2026-12416