High · 7.2 CVE-2026-106608 EUVD-2026-96377GHSA-m8vc-mf6h-mr98

WordPress WooCommerce plugin 9.8.0-11.1.2 - Shop Manager+ Privilege Escalation vulnerability

Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack

Vendor: Automattic Product: WooCommerce Category: Web / CMS

Description

Incorrect Privilege Assignment vulnerability in Automattic WooCommerce woocommerce allows Privilege Escalation.This issue affects WooCommerce: from 9.8.0 through 11.1.2.

Affected products

Vendor	Product	Affected	Fixed
Automattic	WooCommerce	9.8.0 – ≤ 11.1.2	—

References

https://patchstack.com/database/wordpress/plugin/woocommerce/vulnerability/wordpress-woocommerce-plugin-9-8-0-11-1-2-privilege-escalation-vulnerability?_s_id=cve vdb-entry