Skip to content
Cart

Notes from a real WooCommerce store

How we build and run the plugins sold on wexofy.com — shipping, orders, checkout and everything else that happens between "Place order" and "Delivered".

Articles

WooCommerce Privilege Escalation CVE-2026-106608 Explained

WooCommerce Privilege Escalation CVE-2026-106608 Explained

A WooCommerce privilege escalation flaw (CVE-2026-106608, CVSS 7.2) was disclosed on 10 October. Shop Manager accounts on versions 9.8.0-11.1.2 can escalate to full admin. Update to 11.2.1.

Select your currency
EUR Euro