Known vulnerabilities in Unknown WP eCommerce
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-1128 | The WP eCommerce WordPress plugin through 3.15.1 does not have CSRF check in place when deleting coupons, which could… | 4.3 Medium | Mar 6, 2026 |
| CVE-2026-1235 | The WP eCommerce WordPress plugin through 3.15.1 unserializes user input via ajax actions, which could allow… | 6.5 Medium | Feb 11, 2026 |