CVE-2024-2322

CVE-2024-2322 affects the WordPress plugin WooCommerce Cart Abandonment Recovery prior to version 1.2.27. The vulnerability stems from missing CSRF protection in the plugin’s bulk actions, enabling CSRF attackers to cause logged-in admins to delete arbitrary email templates and to delete/unsubscr...