CVE-2026-93771

Shop manager PHP Object Injection in Cost of Goods for WooCommerce <= 3.5.2 versions.

Published Sep 30, 2026
CVSS 7.2 high
0.4% chance of exploitation in the next 30 days (EPSS)

Affected software

WPFactory Cost of Goods for WooCommerce

CVE-2026-93771 at the National Vulnerability Database