CVE-2026-49777: Critical Supply Chain Vulnerability in Product Slider Pro for WooCommerce
CVE-2026-49777 is a critical vulnerability in the Product Slider Pro for WooCommerce plugin from ShapedPlugin, with a CVSS score of 10.0. It…
Tag: WordPress
CVE-2026-10735: Supply Chain Compromise of ShapedPlugin WordPress Plugins
CVE-2026-10735 is a high-severity vulnerability (CVSS 9.8) covering the entire supply chain incident affecting multiple ShapedPlugin Pro plugins. Attackers compromised the vendor's…
ShapedPlugin: WordPress Plugin Vendor Compromised in Supply Chain Attack
ShapedPlugin is a WordPress plugin vendor whose Pro plugins were backdoored in a supply chain attack. The company confirmed the incident and…
SocGholish Malware: Loader Disrupted in Coordinated Law Enforcement Action
SocGholish is a malware loader that uses compromised WordPress sites to distribute payloads. It was disrupted in a separate action days before…