High · 7.2 CVE-2026-94390 EUVD-2026-90854GHSA-72h6-c42h-mjxr

WordPress Hide Shipping Method For WooCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability

Published Oct 1, 2026 · Updated Oct 1, 2026 · Assigned by Patchstack

Vendor: Dotstore Product: Hide Shipping Method For WooCommerce Category: Web / CMS

Description

Editor PHP Object Injection in Hide Shipping Method For WooCommerce <= 1.5.4 versions.

Affected products

Vendor	Product	Affected	Fixed
Dotstore	Hide Shipping Method For WooCommerce	≤ 1.5.4	—

References

https://patchstack.com/database/wordpress/plugin/hide-shipping-method-for-woocommerce/vulnerability/wordpress-hide-shipping-method-for-woocommerce-plugin-1-5-4-php-object-injection-vulnerability?_s_id=cve vdb-entry