CVE-2026-49777

CriticalCVSS 10.0/10Last modified Jul 23, 2026

Description

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted.

This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4.

Metrics

CVSS 3.1 10.0/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-1284

Affected software

No affected versions have been published.

Timeline

Published: Jun 5, 2026
Last modified: Jul 23, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-497787.1Unauthenticated Cross Site Scripting (XSS) in WPFunnels Pro <= 2.9.4 versions.CVE-2026-497796.5Path Traversal: '.../...//' vulnerability in Addify Tax Exempt for WooCommerce allows Path Traversal. This issue affects Tax Exempt for Woo CVE-2026-49789.8Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in UMAI Vision Traffic Analysis System al CVE-2026-497808.8Customer Privilege Escalation in Dokan <= 5.0.2 versions.CVE-2026-497819.8Unauthenticated PHP Object Injection in OttoKit <= 1.1.27 versions.CVE-2026-497825.4Missing Authorization vulnerability in Elementor Elementor Website Builder allows Exploiting Incorrectly Configured Access Control Security CVE-2026-497837.8Improperly implemented security check for standard in Windows Secure Boot allows an authorized attacker to bypass a security feature locally CVE-2026-497847.0Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authori CVE-2026-497857.8Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.CVE-2026-497877.5Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.CVE-2026-497887.5Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network.CVE-2026-497897.8Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.