7.5
High
CVE-2026-48888 Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS
Description
Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects WooCommerce: from n/a before 11.1.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WooCommerce 11.1 | earliest → < 11.1.0 | 11.1.0 |
Other CVEs of WooCommerce
The 18 CVEs of WooCommerce →
CVE-2026-106608
Incorrect Privilege Assignment vulnerability in Automattic WooCommerce woocommerce allows Privilege Escalation.This…
7.2
High
CVE-2026-57777
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic…
7.6
High
CVE-2026-3589
The WooCommerce WordPress plugin from versions 5.4.0 to 10.5.2 does not properly handle batch requests, which could…
7.5
High
CVE-2025-15033
A vulnerability in WooCommerce 8.1 to 10.4.2 can allow logged-in customers to access order data of guest customers on…
6.5
Medium