WordPress Product Slider Pro for WooCommerce < 3.5.4 - Supply Chain Backdoor RCE

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4. id: CVE-2026-49777 info: name: WordPress Product Slider Pro f...

CVE-2026-49777

CVE-2026-49777 CVE-2026-49777 - ShapedPlugin Product Slider Pro for WooCommerce 后门远程代码执行 RCE 深入技术分析：Product Slider Pro 后门漏洞 漏洞基础与成因 CWE-1284 该漏洞的技术起源被归类为 CWE-1284："对输入中指定数量验证不当"。这意味着软件接收用户输入，预期用户指定数量（例如大小、长度、数量），但未能正确验证该输入。攻击者可以利用此漏洞发送与正常预期不同的恶意输入，导致系统表现出意外行为。 . 受影响版本与补丁状态 受影响版本：3.5.3 之前的所有版本。...

woocommerce-plugin-supply-chain-security-assessment

CVE-2026-49777 - Implantación de Software Malicioso y RCE en WooCommerce Product Slider Pro Informe de Ciberseguridad Estilo Consultoría Informe profesional de evaluación de vulnerabilidades sobre el riesgo en la cadena de suministro del plugin de WooCommerce, que incluye el impacto empresarial, ...

CVE-2026-65456

Contributor Insecure Direct Object References IDOR in Product Slider for WooCommerce = 1.13.62 versions...

CVE-2026-65456 WordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References IDOR in Product Slider for WooCommerce = 1.13.62 versions...

CVE-2026-65456 WordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References IDOR in Product Slider for WooCommerce = 1.13.62 versions...

CVE-2026-65456

CVE-2026-65456 affects the WordPress plugin Product Slider for WooCommerce (versions

EUVD-2026-48221

Contributor Insecure Direct Object References IDOR in Product Slider for WooCommerce = 1.13.62 versions...

PT-2026-63879

Contributor Insecure Direct Object References IDOR in Product Slider for WooCommerce = 1.13.62 versions...

CVE-2026-65456: Authorization Bypass Through User-Controlled Key

Contributor Insecure Direct Object References IDOR in Product Slider for WooCommerce = 1.13.62 versions...

WordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Product Slider for WooCommerce versions = 1.13.62...

Exploit for CVE-2026-49777

!AMN SECURITYhttps://img.shields.io/badge/AMN-SECURITY-000000...

CVE-2026-10735 ShapedPlugin Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server

Multiple Shapedsmart-post-show-pro WordPress plugin before 4.0.2, Real Testimonials Pro WordPress plugin before 3.2.5, Product Slider for WooCommerce Pro WordPress plugin before 3.5.3 Pro smart-post-show-pro WordPress plugin before 4.0.2, Real Testimonials Pro WordPress plugin before 3.2.5, Produ...

CVE-2026-10735

A supply chain compromise of the ShapedPlugin build and distribution pipeline allowed attackers to inject a multi-stage backdoor into official Pro plugin updates distributed via the Easy Digital Downloads infrastructure. The affected products include Real Testimonials Pro (before 3.2.6), Product ...

CVE-2026-10735: Undefined Security Weakness

Multiple Shapedsmart-post-show-pro WordPress plugin before 4.0.2, Real Testimonials Pro WordPress plugin before 3.2.5, Product Slider for WooCommerce Pro WordPress plugin before 3.5.3 Pro smart-post-show-pro WordPress plugin before 4.0.2, Real Testimonials Pro WordPress plugin before 3.2.5, Produ...

Exploit for CVE-2026-49777

CVE-2026-49777 CVE-2026-49777 - ShapedPlugin Product Slider Pr...

CVE-2022-44630

Cross-Site request forgery CSRF vulnerability in YITH YITH WooCommerce Product Slider Carousel allows Cross Site Request Forgery. This issue affects YITH WooCommerce Product Slider Carousel: from n/a through 1.16.0...

CVE-2022-44630 WordPress YITH WooCommerce Product Slider Carousel plugin <= 1.16.0 - Cross-Site Request Forgery (CSRF)

Cross-Site request forgery CSRF vulnerability in YITH YITH WooCommerce Product Slider Carousel allows Cross Site Request Forgery. This issue affects YITH WooCommerce Product Slider Carousel: from n/a through 1.16.0...

CVE-2022-44630 WordPress YITH WooCommerce Product Slider Carousel plugin <= 1.16.0 - Cross-Site Request Forgery (CSRF)

Cross-Site request forgery CSRF vulnerability in YITH YITH WooCommerce Product Slider Carousel allows Cross Site Request Forgery. This issue affects YITH WooCommerce Product Slider Carousel: from n/a through 1.16.0...

EUVD-2022-56004

Cross-Site request forgery CSRF vulnerability in YITH YITH WooCommerce Product Slider Carousel allows Cross Site Request Forgery. This issue affects YITH WooCommerce Product Slider Carousel: from n/a through 1.16.0...