CVE-2026-49777

CriticalCVSS 10.0

Published: 05/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.66%

74th percentile - higher than 74% of all known CVEs

Summary

The Product Slider Pro for WooCommerce plugin for WordPress before version 3.5.4 has an improper validation of specified quantity in input vulnerability, allowing malicious software implantation.

Risk Assessment

An attacker can exploit this vulnerability to inject malicious code into the WooCommerce store, potentially leading to customer data theft, admin account takeover, or malware distribution.

Recommendation

Immediately update the Product Slider Pro for WooCommerce plugin to version 3.5.4 or later.

Original NVD description (English source)

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4.