WordPress Product Slider Pro for WooCommerce Plugin <3.5.4 Backdoor Vulnerability Advisory

Vulnerability Overview Vulnerability Name: WordPress Product Slider Pro for WooCommerce Plugin < 3.5.4 High-Priority Backdoor Vulnerability Vulnerability Type: Backdoor CVSS Score: 10 (Critical) Known Exploits: Yes (KEV) Affected Versions Affected Versions: < 3.5.4 Fixed Version: 3.5.4 or higher Mitigation 1. Automatic Mitigation: - Patchstack has released mitigation rules to block any exploitation until an update to the patched version is applied. - Use Patchstack for automatic vulnerability mitigation to keep your website secure. 2. Manual Update: - Update to version 3.5.4 or higher to resolve the vulnerability. - Patchstack users can enable automatic updates specifically for vulnerable plugins. Additional Information Risk Description: - This vulnerability is highly dangerous and is expected to be actively exploited. Such vulnerabilities are commonly used in large-scale attack campaigns, where attackers simultaneously target hundreds of thousands of websites, regardless of traffic volume or popularity. - A backdoor is a malicious file that allows an attacker to access and exploit a website at any time, for example, by executing ad-injection payloads. Note: - Due to the specific nature of this vulnerability, virtual mitigation is best-effort and not comprehensive. Any website that currently or previously had a compromised version of the plugin installed should be considered infected. Timeline Report Date: May 21, 2026 Reporter: Shane Details Software: Product Slider Pro for WooCommerce Type: Plugin Vulnerable Versions: < 3.5.4 Fixed Version: 3.5.4 Additional Resources How to Get the Fastest Protection: - How does Patchstack provide the fastest protection? - How does Patchstack mitigate vulnerabilities? - Why do hackers target my website? - What if my website has already been compromised? Subscription Weekly WordPress Security Intelligence: - Enter your email address to subscribe to the weekly WordPress security intelligence newsletter. --- Summary: This is a high-priority backdoor vulnerability affecting the WordPress Product Slider Pro for WooCommerce plugin versions < 3.5.4. It is recommended to update to version 3.5.4 or higher immediately, or use Patchstack's automatic mitigation features.

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Product Slider Pro for WooCommerce Plugin <3.5.4 Backdoor Vulnerability Advisory