CVE-2026-49777

Description

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4.

References

• https://patchstack.com/database/wordpress/plugin/woo-product-slider-pro/vulnerability/wordpress-product-slider-pro-for-woocommerce-plugin-3-5-2-backdoor-vulnerability?_s_id=cve
• https://packetstorm.news/files/id/225469/
• https://packetstorm.news/download/225469
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-34792
• https://github.com/HORKimhab/CVE-Wordpress
• https://raw.githubusercontent.com/HORKimhab/CVE-Wordpress/main/README.md