CVE-2026-49777

CVE Enrichment

CVSS: 10.0 CRITICAL
EPSS: 1.66%
EPSS Percentile: 76.53%
CISA KEV: Not listed

Description

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 05-Jun-2026 16:16
Last Modified: 23-Jul-2026 14:10
EPSS Date: 2026-10-29
CWE: CWE-1284

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:C /
                            C:H /
                            I:H /
                            A:H

References

[email protected]

Last enrichment sync: 30-Oct-2026 17:43
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

#ShapedPlugin ShapedPlugin Pro Updates Backdoored in Supply-Chain Attack

CVE (1)

MITRE ATT&CK (2)

Vendors (1)

Products (6)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.