medium6.5
CVE-2026-1235
The WP eCommerce WordPress plugin through 3.15.1 unserializes user input via ajax actions, which could allow unauthenticated users to perform PHP Object Inject…
Impact
The WP eCommerce WordPress plugin through 3.15.1 unserializes user input via ajax actions, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.
Affected products
| Product | Affected versions |
|---|---|
| WP ECommerce WordPress Plugin | through 3.15.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.