CVE-2026-97668

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent metavalue in all versions up to, and including, 10.8.0 due to insufficient escaping on user supplied data and lack of sufficient preparation on the existing SQL query in the...

CVE-2026-97668

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to an unauthenticated SQL Injection in all versions up to and including 10.8.0 . The root cause is insufficient escaping and a lack of prepared statements in the update_guest_persistent_cart() function. Specifically, the ab...

EUVD-2026-100776

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent metavalue in all versions up to, and including, 10.8.0 due to insufficient escaping on user supplied data and lack of sufficient preparation on the existing SQL query in the...

PT-2026-113610

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent meta value in all versions up to, and including, 10.8.0 due to insufficient escaping on user supplied data and lack of sufficient preparation on the existing SQL query in the...