CVE-2026-94390

The vulnerability affects the Hide Shipping Method plugin for WooCommerce versions 1.5.4 and earlier, allowing for PHP Object Injection through improper handling of user input. This could enable an attacker to execute arbitrary PHP code, potentially compromising the integrity and security of the affected e-commerce sites. WooCommerce site administrators using the vulnerable plugin should prioritize immediate updates to mitigate the risk of exploitation.