CVE-2026-48888

HIGH NVD

CVSS Score 7.5

Severity HIGH

Published Sep 08, 2026

Vendor unknown

Description

Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects WooCommerce: from n/a before 11.1.0.

References

https://patchstack.com/database/wordpress/plugin/woocommerce/vulnerability/wordpress-woocommerce-plugin-11-1-0-denial-of-service-attack-vulnerability?_s_id=cve