Notfound Gnucommerce vulnerabilities

• kagla gnucommerce WordPress GNUCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability CVE-2025-30985 9.8 CriticalApril 15, 2025
• kagla gnucommerce WordPress GNUCommerce Plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-26564 7.1 HighMarch 26, 2025