Unknown WP Ecommerce vulnerabilities
2 vulnerabilities
Known vulnerabilities in Unknown WP Ecommerce, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2026-1235unknown · wp ecommerce +1 moreWP eCommerce <= 3.15.1 - Unauthenticated PHP Object InjectionThe WP eCommerce WordPress plugin through 3.15.1 unserializes user input via ajax actions, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.EPSS0.31%MediumCVE-2026-1128unknown · wp ecommerce +1 moreWP eCommerce <= 3.15.1 - Coupon Deletion via CSRFThe WP eCommerce WordPress plugin through 3.15.1 does not have CSRF check in place when deleting coupons, which could allow attackers to make a logged in admin remove them via a CSRF attackEPSS0.10%