CVE-2023-2986 Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypass

🗓️ 08 Jun 2023 01:56:22Reported by GoogleType

osv

osv🔗 osv.dev👁 29 Views

The Abandoned Cart Lite for WooCommerce plugin is vulnerable to authentication bypass due to insufficient encryption

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/woocommerce-abandoned-cart/trunk/woocommerce-ac.php
plugins	www.plugins.trac.wordpress.org/browser/woocommerce-abandoned-cart/trunk/woocommerce-ac.php
plugins	www.plugins.trac.wordpress.org/changeset/2922242/
plugins	www.plugins.trac.wordpress.org/changeset
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/68052614-204f-4237-af0e-4b8210ebd59f
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2023/2xxx/CVE-2023-2986.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-2986
github	www.github.com/TycheSoftwares/woocommerce-abandoned-cart/pull/885
github	www.github.com/Ayantaker/CVE-2023-2986
wordfence	www.wordfence.com/blog/2023/06/tyche-softwares-addresses-authentication-bypass-vulnerability-in-abandoned-cart-lite-for-woocommerce-wordpress-plugin/

12 Aug 2026 03:51Current

7.4High risk

Vulners AI Score7.4

CVSS 3.19.8

abandoned cart lite woocommerce authentication bypass insufficient encryption vulnerability wordpress historical check-out links null key values