High · 7.2 CVE-2026-93624 EUVD-2026-89826GHSA-g7g6-rr4j-j6j8

WordPress Music Player for WooCommerce plugin <= 1.9.1 - PHP Object Injection vulnerability

Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack

Vendor: codepeople Product: Music Player for WooCommerce Category: Web / CMS

Description

Shop manager PHP Object Injection in Music Player for WooCommerce <= 1.9.1 versions.

Affected products

Vendor	Product	Affected	Fixed
codepeople	Music Player for WooCommerce	≤ 1.9.1	—

References

https://patchstack.com/database/wordpress/plugin/music-player-for-woocommerce/vulnerability/wordpress-music-player-for-woocommerce-plugin-1-9-1-php-object-injection-vulnerability?_s_id=cve vdb-entry