CVE-2026-93624

Shop manager PHP Object Injection in Music Player for WooCommerce <= 1.9.1 versions.

• Published Sep 30, 2026
• CVSS 7.2 high
• 0.4% chance of exploitation in the next 30 days (EPSS)

CVE-2026-93624 at the National Vulnerability Database