CVE-2026-10735

CVE-2026-10735 corresponds to a supply‑chain compromise of ShapedPlugin Pro products. Pro plugins (Product Slider Pro for WooCommerce, Real Testimonials Pro, Smart Post Show Pro) were distributed via the vendor’s update channel with a backdoor loader (LicenseLoader.php) that runs on admin_init an...