What changed: WooCommerce 11.2.2 is available. The security release strengthens Store API and REST API checks and improves column-mapping validation in the product CSV importer. It prevents orders that cannot be saved from proceeding to payment and includes a database update to clean up affected product attribute data.
Who is affected
Businesses using WooCommerce are affected, particularly stores using Store API checkout or the product CSV importer.
What it means for your business
For businesses using WooCommerce, a failed order save during Store API checkout now stops the payment flow. An extension callback that throws during the relevant order-saving events causes checkout to stop.
What to do
Update your WooCommerce installation to the released security version as soon as possible; review the update guide and the release notes covering the database update.
When it takes effect
The release was published on November 4, 2026, and is available for download.
Source: https://developer.woocommerce.com/2026/11/04/woocommerce-11-2-2-release-notes/
