Tag: CVE-2026-10735

Malware

ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack

Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack after unknown threat actors tampered with the official release channels…

backdoor CVE-2026-10735 CVE-2026-11645 CVE-2026-49777

June 25, 2026

Critical CVEs

CVE-2026-10735: Supply Chain Compromise of ShapedPlugin WordPress Plugins

CVE-2026-10735 is a high-severity vulnerability (CVSS 9.8) covering the entire supply chain incident affecting multiple ShapedPlugin Pro plugins. Attackers compromised the vendor's…

CVE-2026-10735 ShapedPlugin supply chain attack WordPress

June 25, 2026