EUVD-2026-34792
GHSA-r843-rvx7-3rjg
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted.
This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.3.
No patched version is available - the vendor has applied a fix to an existing release without publishing a new version. While the patch provided by the vendor is valid, releasing it under the existing version number leaves users unable to reliably determine whether they are running a patched or vulnerable installation. As a result, we treat this as an unpatched version.
Articles & Coverage 1
AnalysisAI
Backdoor/malicious code implant in the ShapedPlugin Product Slider Pro for WooCommerce WordPress plugin (versions before 3.5.3) allows remote unauthenticated attackers full compromise of the hosting site with CVSS 10.0 and a scope-changing vector. The Patchstack reference characterizes this as a backdoor vulnerability, and no public exploit has been identified at the time of analysis, though the trivial nature of supply-chain implants means abuse is plausible. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions - remote unauthenticated exploitation against default configurations of any WordPress site that has the Product Slider Pro for WooCommerce plugin installed at a version prior to 3.5.3 (including 3.5.2 instances that were not reinstalled after the silent fix). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | All signals point to maximum priority: the CVSS:3.1 vector AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H reflects remote, unauthenticated, low-complexity exploitation with scope change and full CIA impact - the textbook 10.0. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An unauthenticated attacker scans the internet for WordPress sites running Product Slider Pro for WooCommerce and issues a single crafted HTTP request to the backdoored endpoint embedded in the plugin, which executes attacker-supplied code with PHP-process privileges. With scope change and full impact per the CVSS vector, the attacker pivots into the WordPress database to exfiltrate customer/order data, drops a persistent web shell, and abuses WooCommerce admin functions - all without prior credentials or user interaction. … |
| Remediation | Upstream fix available but no vendor-released patched version identifier exists - the vendor silently corrected the existing release without bumping the version, so administrators should reinstall Product Slider Pro for WooCommerce directly from ShapedPlugin, replacing all plugin files on disk to ensure the malicious code is removed, and verify file hashes against a freshly downloaded copy rather than trusting the displayed version string. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Audit all WordPress installations to identify sites using ShapedPlugin Product Slider Pro; prepare plugin disablement procedures and verify backup integrity. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More from same product – last 7 days
The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX action which, given a valid nonce that i
Remote code execution in UpdraftPlus: WP Backup & Migration Plugin for WordPress (versions ≤1.26.4) allows unauthenticat
The weMail: Email Marketing, Email Automation, Newsletters, Subscribers & Email Optins for WooCommerce WordPress plugin
The Taskbuilder WordPress plugin before 5.0.8 does not properly sanitise a URL parameter before echoing it into inline
Remote code execution in Edgar Rojas WooCommerce PDF Invoice Builder WordPress plugin (versions through 2.0.8) allows un
Share
External POC / Exploit Code
Leaving vuln.today