9.8
Critique
CVE-2026-17032 Multiple Supsystic Pro plugins were distributed with malicious code through the vendor's compromised update server,…
Description
Multiple Supsystic Pro plugins were distributed with malicious code through the vendor's compromised update server, allowing unauthenticated attackers to deploy a second-stage payload that exfiltrates credentials and other sensitive data and grants full control of affected sites.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| google-maps-easy-pro 1.6 | 1.6.9 → < 1.7.0 | 1.7.0 |
| supsystic-gallery-pro 2.10 | 2.10.9 → < 2.11.1 | 2.11.1 |
| tables-generator-pro 1.9 | 1.9.20 → < 1.10.1 | 1.10.1 |