CVE-2026-49777

WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4.

We have discovered 309 live websites that are affected by CVE-2026-49777.

Run a Free Instant Scan



Affected Software

Product  Woo Product Slider Pro
Category Wordpress Plugins
Vulnerable Domains309 live websites (68% of Woo Product Slider Pro install base)
Vulnerable Versions
  • from 0 through 3.5.4
Vulnerable Versions Count33 versions ( 87% of all versions)


Common Weakness Enumeration

CWE-1284 Improper Validation of Specified Quantity in Input



Details

  • Published - Jun 5, 2026
  • Updated - Jun 8, 2026

Credits

  • Shane | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-49777
United States81 websites


Italy25 websites
GB23 websites
Germany22 websites
Iran14 websites
Israel11 websites
France9 websites
Australia8 websites
Belgium8 websites
Switzerland7 websites

Website Distribution by TLD

Number of websites using CVE-2026-49777
.com134 websites
.it17 websites
.co.uk14 websites
.de10 websites
.com.au8 websites
.pl6 websites
.eu6 websites
.org5 websites
.ch5 websites
.at4 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-49777

Top websites that are affected by CVE-2026-49777. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
****.org United States***,***
*********.se United States***,***
*************.com United States***,***
*******.it Italy***,***
*************.org United States***,***
********************.com Denmark*,***,***
*********************.**.uk GB*,***,***
**************.org Italy*,***,***
*********.com France*,***,***
*********.com Hong Kong*,***,***
See full domain list

FAQ

CVE-2026-49777 is Improper Validation of Specified Quantity in Input in Woo Product Slider Pro
A total of 309 websites have been identified as vulnerable to CVE-2026-49777, based on global website indexing conducted by WebTechSurvey.
The Woo Product Slider Pro is affected by the CVE-2026-49777 vulnerability.
Woo Product Slider Pro versions up to 3.5.4 are vulnerable to CVE-2026-49777.
CVE-2026-49777 is resolved in version 3.5.4 of Woo Product Slider Pro.