Description
Subscriber SQL Injection in WCMultiShipping <= 3.0.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WcMultishipping – Mondial Relay & Chronopost for Wooommerce | WCMultiShipping | ≤ 3.0.2 | — |
High · 8.5
CVE-2026-52700
EUVD-2026-36905GHSA-rg72-qvpg-fcv6
WordPress WCMultiShipping plugin <= 3.0.2 - SQL Injection vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack