A vulnerability was found in WP eCommerce Plugin up to 3.15.1 on WordPress. It has been rated as critical. Affected is an unknown function. The manipulation leads to deserialization.

This vulnerability is listed as CVE-2026-1235. The attack may be initiated remotely. There is no available exploit.