CVE-2026-96344 — WordPress eCommerce Product Catalog plugin <= 3.6.0 - PHP Object Injection vulnerability

Custom role PHP Object Injection in eCommerce Product Catalog <= 3.6.0 versions.

Published: 2026-09-30 · CVSS: 7.2 · CVSS 3.1

Custom role PHP Object Injection in eCommerce Product Catalog <= 3.6.0 versions.

Original CVE JSON · STIX 2.1

Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7