CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4.
Explanation of Vulnerability in Simple Terms
Product Slider Pro for WooCommerce versions before 3.5.4 contain a critical vulnerability allowing unauthenticated attackers to gain complete control over the site. The flaw requires no user interaction and can be exploited remotely over the network. All affected installations should update immediately to version 3.5.4 or later.
What an attacker can do
Read sensitive data, modify site content, and disrupt site availability without authentication.
Potential impact on your site
Complete compromise of the WooCommerce site, including customer data, product information, and site functionality.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
