Multiple ShapedPlugin Plugins < (Various Versions) - Backdoored Software
criticalMultiple plugins by ShapedPlugin contain a backdoor in various versions. This makes it possible for unauthenticated attackers to achieve backdoor access to sites with the compromised copy of the software installed. CVE-2026-49777 is a duplicate of this CVE.
- CVSS:
- 9.8
- Affected:
- up to 4.0.2
- Fixed in:
- 4.0.2
- Disclosed:
- Jun 4, 2026