Is CVE-2026-106608 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-106608?

CVE-2026-106608 has a CVSS v3 severity of HIGH (7.2).

Back

CVE-2026-106608

Description

Incorrect Privilege Assignment vulnerability in Automattic WooCommerce woocommerce allows Privilege Escalation.This issue affects WooCommerce: from 9.8.0 through 11.1.2.