Description
Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted.
This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ShapedPlugin | Product Slider Pro for WooCommerce | < 3.5.4 | 3.5.4 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 3 repositories
-
HORKimhab/CVE-Wordpress ★ 1 · Jun 24, 2026
CVE-2026-49777, CVE-2026-10735
-
katranSefa/CVE-2026-49777 ★ 0 · Sep 6, 2026
-
izxci/CVE-2026-49777 ★ 0 · Jun 12, 2026
CVE-2026-49777 - ShapedPlugin Product Slider Pro for WooCommerce Backdoor RCE
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- WordPress Product Slider Pro for WooCommerce < 3.5.4 - Supply Chain Backdoor RCE http/cves/2026/CVE-2026-49777.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.