CVE-2026-96344 Custom role PHP Object Injection in eCommerce Product Catalog <= 3.6.0 versions

Description

Custom role PHP Object Injection in eCommerce Product Catalog <= 3.6.0 versions.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
eCommerce Product Catalog 3.6	premières → 3.6.0	Pas de correctif indiqué

Autres CVE de eCommerce Product Catalog

Les 10 CVE de eCommerce Product Catalog →

CVE-2026-116851 Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions 7.1 Élevée CVE-2026-115596 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode… 7.1 Élevée CVE-2026-105056 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode… 6.5 Moyenne CVE-2026-76128 The eCommerce Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode… 6.4 Moyenne