High · 7.5 CVE-2026-48888 EUVD-2026-72651GHSA-p55m-mp38-r6cw

WordPress WooCommerce plugin < 11.1.0 - Denial of Service Attack vulnerability

Published Sep 8, 2026 · Updated Sep 8, 2026 · Assigned by Patchstack

Description

Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS.

This issue affects WooCommerce: from n/a before 11.1.0.

Vendor	Product	Affected	Fixed
Automattic	WooCommerce	< 11.1.0	11.1.0