Veille CVE

Septembre 2026

2 CVE

  1. CVE-2026-48888 7.5 Élevée

    Automattic WooCommerce

    Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects WooCommerce: from n/a before 11.1.0.

  2. CVE-2026-57777 7.6 Élevée

    Automattic WooCommerce

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic WooCommerce allows Blind SQL Injection. This issue affects WooCommerce: from n/a before 11.0.