Multiple ShapedPlugin Plugins < (Various Versions) - Backdoored Software
criticalMultiple plugins by ShapedPlugin contain a backdoor in various versions. This makes it possible for unauthenticated attackers to achieve backdoor access to sites with the compromised copy of the software installed. CVE-2026-49777 is a duplicate of this CVE.
- CVSS:
- 9.8
- Affected:
- up to 3.2.5
- Fix:
- No patched version reported
- Disclosed:
- Jun 4, 2026