CVE-2026-49777

WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4.

Affected

ShapedPlugin, LLC · Product Slider Pro for WooCommerce

CVSS v3.1 PATCHSTACK

10.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

2.02% chance of exploitation in the next 30 days, 81st percentile

Nuclei

critical · CWE-506

Published

2026-06-05

Updated

2026-06-08

Proof-of-concept exploits (3)

• xxconi/CVE-2026-49777-CVE-2026-107350★ · 2026-06-21
• izxci/CVE-2026-497770★ · 2026-06-12
• katranSefa/CVE-2026-497770★ · 2026-09-06

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-49777.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2025-13407
• CVE-2025-5947
• CVE-2025-6254
• CVE-2026-10735
• CVE-2026-12415
• CVE-2026-12416