Automattic WooCommerce

2 known vulnerabilities in Automattic WooCommerce, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-48888 CVSS 7.5 high Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects…
CVE-2026-57777 CVSS 7.6 high Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic WooCommerce allows Blind…