Description
Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.3. No patched version is available - the vendor has applied a fix to an existing release without publishing a new version. While the patch provided by the vendor is valid, releasing it under the existing version number leaves users unable to reliably determine whether they are running a patched or vulnerable installation. As a result, we treat this as an unpatched version.
Problem types
CWE-1284 Improper Validation of Specified Quantity in Input
Product status
Any version before 3.5.3
Credits
Shane | Patchstack Bug Bounty Program
References
patchstack.com/...gin-3-5-2-backdoor-vulnerability?_s_id=cve