WooPayments Security Update Fixes Subscriptions Issue

WooCommerce has published a security update for WooPayments, its bundled payments extension. The update, dated November 3, 2026, addresses a security issue in the subscriptions functionality included with WooPayments. It extends a fix the WooCommerce team announced in August.

Store owners should check whether their installed version is affected. The WooCommerce Developer Blog post lists fixed versions by release line, covering everything from 9.0.0 through 11.2.x. Readers should confirm the exact fixed version for their line on the WooCommerce blog rather than relying on this summary.

Why it matters

The flaw sits in a feature that many stores may run without actively managing. Developers and agencies must check every affected site, including staging and development sites, because an update on one site does not confirm the status of another. Sites managed by a host also need a check, even when automatic updates are enabled.

What to do

In WP Admin, go to Plugins → Installed Plugins, find WooPayments, and compare its version with the fixed list. If your version is affected and an update is available, select Update now, then confirm the installed version matches a fixed release. If the update is unavailable or fails, contact WooCommerce Support with your installed version and any error message.