CERT24Multiple ShapedPlugin Pro WordPress Plugins Contain BackdoorsLoading data…
CERT24Threat Observatory
Period

Multiple ShapedPlugin Pro WordPress Plugins Contain Backdoors

Unknown threat actors compromised ShapedPlugin's build and distribution infrastructure and inserted backdoor code into Pro plugins distributed through official update channels. The affected products are Product Slider Pro for WooCommerce 3.5.2, Real Testimonials Pro 3.2.4 and 3.2.5, and Smart Post Show Pro 4.0.1. The free versions on WordPress.org were not affected.

← Back to intelligence

Multiple ShapedPlugin Pro WordPress Plugins Contain Backdoors

Unknown threat actors compromised ShapedPlugin's build and distribution infrastructure and inserted backdoor code into Pro plugins distributed through official update channels. The affected products are Product Slider Pro for WooCommerce 3.5.2, Real Testimonials Pro 3.2.4 and 3.2.5, and Smart Post Show Pro 4.0.1. The free versions on WordPress.org were not affected.