WooCommerce 11.2 Closes a Shop Manager Flaw That Could Reach Administrator Accounts
WooCommerce 11.2.0, released October 7, 2026, fixes CVE-2026-106608, which let shop managers take over multi-role accounts including some administrators, and adds four other security changes. 11.2.1 followed on October 9 with checkout fixes.