What was published
WooCommerce published a WooPayments security update affecting the subscriptions capability. The vendor notice identifies version 11.2.1 as the fixed release for the affected 11.2.0 line.
Skepra / Web recovery & resilience
WooPayments subscriptions security update.
On 3 November 2026, WooCommerce published a security update for WooPayments subscriptions. This page records the vendor notice.
Ask whether this applies to your siteWhen it may apply
Confirm whether WooPayments is installed, whether subscriptions are enabled, and which version is in use before planning an update.
Safe update route
Obtain the owner's written authorisation and agree a maintenance scope first. Take a recoverable backup, update through the agreed change route, then test the relevant checkout and subscription flows before closing the work.
Source
WooCommerce developer advisory, 3 Nov 2026.