Aller au contenu
Se connecter
6.5 Moyenne

CVE-2026-1235 The WP eCommerce WordPress plugin through 3.15.1 unserializes user input via ajax actions, which could allow…

Description

The WP eCommerce WordPress plugin through 3.15.1 unserializes user input via ajax actions, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.

Produits et versions touchés

Produit Versions touchées Corrigé en
WP eCommerce 3.15 premières → 3.15.1 Pas de correctif indiqué

Autres CVE de WP eCommerce

Les 2 CVE de WP eCommerce →
CVE-2026-1128 The WP eCommerce WordPress plugin through 3.15.1 does not have CSRF check in place when deleting coupons, which could… 4.3 Moyenne
Suivre cette CVE