Description
Multiple Supsystic Pro plugins were distributed with malicious code through the vendor's compromised update server, allowing unauthenticated attackers to deploy a second-stage payload that exfiltrates credentials and other sensitive data and grants full control of affected sites.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Unknown google-maps-easy-pro
Default version status: unaffected
1.6.9 to < 1.7.0affected
Unknown supsystic-gallery-pro
Default version status: unaffected
2.10.9 to < 2.11.1affected
Unknown tables-generator-pro
Default version status: unaffected
1.9.20 to < 1.10.1affected