166 matches found
Abandoned Cart Lite for WooCommerce < 5.2.0 - Cross-Site Scripting
The Abandoned Cart Lite for WooCommerce and Abandoned Cart Pro for WooCommerce plugins for WordPress are vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and including, 5.1.3 and 7.12.0 respectively, due to insufficient input sanitization and output escaping. i...
CVE-2023-2986
CVE-2023-2986 إثبات المفهوم POC نسخة بايثون بواسطة Alucard0x1 إثبات المفهوم للثغرة الأمنية CVE-2023-2986 في إضافة 'Abandoned Cart Lite for WooCommerce' في ووردبريس بنسخة بايثون المصدر https://github.com/Ayantaker/CVE-2023-2986...
EUVD-2026-71935
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.7.1. This is due to missing capability checks and nonce verification on multiple AJAX actions including wcapsaveconnectorsettings, wcapsendmanualemail,...
CVE-2026-81543
Abandoned Cart Pro for WooCommerce plugin for WordPress is affected by a Missing Authorization vulnerability in versions up to and including 10.7.1 . The root cause is the absence of capability checks and nonce verification on multiple AJAX actions (wcap_save_connector_settings, wcap_send_manual_...
WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.7.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation vulnerability
Missing Authorization to Authenticated Subscriber+ Privilege Escalation vulnerability discovered by d.v4ns3c in WordPress Plugin Abandoned Cart Pro for WooCommerce versions = 10.7.1...
CVE-2023-2986
الإثبات الأصلي للمفهوم لـ CVE-2023-2986 إثبات المفهوم للثغرة CVE-2023-2986 في إضافة 'Abandoned Cart Lite for WooCommerce' في ووردبريس التفاصيل ذات الصلة رابط NVD : https://nvd.nist.gov/vuln/detail/CVE-2023-2986 مصدر الإضافة : https://github.com/TycheSoftwares/woocommerce-abandoned-cart/ الإصدارات...
CVE-2026-66682
Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce = 10.4.0 versions...
EUVD-2026-63307
Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce = 10.4.0 versions...
CVE-2026-66682
CVE-2026-66682 is an unauthenticated privilege escalation vulnerability in the Abandoned Cart Pro for WooCommerce WordPress plugin, affecting versions
CVE-2026-66682 WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce = 10.4.0 versions...
PT-2026-78980
Name of the Vulnerable Software and Affected Versions Abandoned Cart Pro for WooCommerce versions prior to 10.4.1 Description An issue allows unauthenticated users to perform privilege escalation. Recommendations Update Abandoned Cart Pro for WooCommerce to version 10.4.1 or later...
EUVD-2026-54088
The Creative Mail WordPress plugin from 1.6.5 to 1.6.9 does not sanitize and escape a parameter before using in an SQL statement, leading to an unauthenticated SQL injection when the abandoned cart email is managed by creative mail...
CVE-2026-3430 Creative Mail 1.6.5 - 1.6.9 - Unauthenticated SQLi
The Creative Mail WordPress plugin from 1.6.5 to 1.6.9 does not sanitize and escape a parameter before using in an SQL statement, leading to an unauthenticated SQL injection when the abandoned cart email is managed by creative mail...
CVE-2026-3430
CVE-2026-3430 affects the Creative Mail WordPress plugin versions 1.6.5–1.6.9. The issue is an unauthenticated SQL injection caused by not sanitizing/escaping a parameter before use in an SQL statement when handling abandoned cart emails. CVSS 3.1 metrics (from WPScan) indicate NETWORK attack vec...
CVE-2026-65557
Shop manager Cross Site Scripting XSS in Abandoned Cart Lite for WooCommerce = 6.8.0 versions...
EUVD-2026-49232
Shop manager Cross Site Scripting XSS in Abandoned Cart Lite for WooCommerce = 6.8.0 versions...
CVE-2026-65557
CVE-2026-65557 concerns the WordPress plugin Abandoned Cart Lite for WooCommerce (versions <= 6.8.0), where a Cross Site Scripting (XSS) flaw affects the shop-manager context. The connected records confirm the affected product (WordPress WooCommerce plugin), the vulnerability type (XSS), and t...
CVE-2026-65557
Shop manager Cross Site Scripting XSS in Abandoned Cart Lite for WooCommerce = 6.8.0 versions...
CVE-2026-65557 WordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Scripting (XSS) vulnerability
Shop manager Cross Site Scripting XSS in Abandoned Cart Lite for WooCommerce = 6.8.0 versions...
WordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Abandoned Cart Lite for WooCommerce versions = 6.8.0...