CVE-2026-93771 — WordPress Cost of Goods for WooCommerce plugin <= 3.5.2 - PHP Object Injection vulnerability

CVE-2026-93771

WordPress Cost of Goods for WooCommerce plugin <= 3.5.2 - PHP Object Injection vulnerability PUBLISHED

Description (CNA)

Shop manager PHP Object Injection in Cost of Goods for WooCommerce <= 3.5.2 versions.

Vendor / product	Versions
WPFactory / Cost of Goods for WooCommerce	affected n/a through 3.5.2

CWE-502

CISA-ADP

No English description supplied.

No references supplied.