CVE-2026-62130: WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.8 - PHP Object Injection vulnerability
Published Oct 10, 2026
·Updated
Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.
Affected Software
1 affected component
WordPress WooCommerce Multilingual & Multicurrency<=5.5.8
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress WooCommerce Multilingual & Multicurrencyto a version that resolves this vulnerability.Fixed in 5.6.3
Event History
Oct 10, 2026
CVE Published
via MITRE·07:36 PM
Data Sourced
via MITRE·07:36 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need?
The attacker must already have high privileges, specifically shop manager access. The attack can then be performed remotely with low complexity and does not require user interaction.
2
How can I determine whether my site is affected?
Check the installed version of WooCommerce Multilingual & Multicurrency. Versions 5.5.8 and earlier are affected.
3
What is the potential impact if this is exploited?
The vulnerability is rated high severity and can affect confidentiality, integrity, and availability, each with high impact.