high7.5

CVE-2026-48888

Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS.

Impact

Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects WooCommerce: from n/a before 11.1.0.

Affected products

Product	Affected versions
WooCommerce: From N/A	before 11.1.0.

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

CWE-770

References

NVD record
CVE.org record
https://patchstack.com/database/wordpress/plugin/woocommerce/vulnerability/wordpress-woocommerce-plugin-11-1-0-denial-of-service-attack-vulnerability?_s_id=cve