kagla GNUCommerce

• CVE-2025-30985 Critical 9.8 WordPress GNUCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability 0.5%
• CVE-2025-26564 High 7.1 WordPress GNUCommerce Plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%