CVE-2026-17032 — Supsystic Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server

CVE-2026-17032

Supsystic Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server PUBLISHED

Description (CNA)

Multiple Supsystic Pro plugins were distributed with malicious code through the vendor's compromised update server, allowing unauthenticated attackers to deploy a second-stage payload that exfiltrates credentials and other sensitive data and grants full control of affected sites.

Affected (CNA)

Vendor / product	Versions
Unknown / google-maps-easy-pro	affected 1.6.9 before 1.7.0
Unknown / supsystic-gallery-pro	affected 2.10.9 before 2.11.1
Unknown / tables-generator-pro	affected 1.9.20 before 1.10.1

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/7ca5ad30-1792-4014-bfad-88911cd64713/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.