Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-125801 EUVD-2026-125292GHSA-6vrw-5386-w3g5

WordPress WooCommerce plugin 11.0.0-11.2.2 - Race Condition vulnerability

Published Nov 13, 2026 · Updated Nov 13, 2026 · Assigned by Patchstack

Description

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Automattic WooCommerce woocommerce allows Leveraging Race Conditions.This issue affects WooCommerce: from 11.0.0 through 11.2.2.

Affected products

VendorProductAffectedFixed
Automattic WooCommerce 11.0.0 – ≤ 11.2.2 —

References