What changed: WooCommerce 11.2.0 adds row matching by GTIN, UPC, EAN, or ISBN in the Product CSV importer, date field support in the Additional Checkout Fields API, configurable emails for order withdrawal requests, and new block styling options. The release also includes security fixes: removal of Cc/Bcc on password-reset and verification emails, stronger authorization checks for downloadable-product links, tighter restrictions on shop manager permissions, super-admin-only Blueprint imports on multisite, and auditing of usage-tracking data.
Who is affected
The source states this applies to all WooCommerce store owners; it also issues a separate compatibility warning for stores running PublishPress Future 3.0.0-4.10.3.
What it means for your business
For businesses running WooCommerce, this means reviewing the security fixes and the PublishPress Future compatibility warning before updating stores to 11.2.0.
What to do
Update your store to WooCommerce 11.2.0; if you use PublishPress Future, upgrade it to 4.10.4 or later first, then verify download links and shop manager permissions after updating.
When it takes effect
WooCommerce 11.2.0 was released on October 7, 2026; the source gives no other date.
Source: https://developer.woocommerce.com/2026/10/07/woocommerce-11-2-0-release-notes/
