Plugin icon

Woocommerce Abandon Cart Pro

woocommerce-abandon-cart-pro

Vulnerabilities:

7

Last Updated:

n/a

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2026-10-13
Title
Abandoned Cart Pro for WooCommerce < 10.8.1 - Unauthenticated SQL Injection via Guest Persistent Cart meta_value
Fixed in
Fixed in 10.8.1
CVSS
9.8 (critical)
Published
2026-10-13
Title
Abandoned Cart Pro for WooCommerce < 10.8.1 - Unauthenticated SQL Injection via AES-CTR Ciphertext Forgery in 'validate' Parameter
Fixed in
Fixed in 10.8.1
CVSS
7.5 (high)
Published
2026-10-13
Title
Abandoned Cart Pro for WooCommerce < 10.8.1 - Unauthenticated Authentication Bypass via Malleable Encryption and Bypassable HMAC via Recovery Link 'validate' Parameter
Fixed in
Fixed in 10.8.1
CVSS
9.8 (critical)
Published
2026-09-04
Title
Abandoned Cart Pro for WooCommerce < 10.7.2 - Subscriber+ Privilege Escalation
Fixed in
Fixed in 10.7.2
CVSS
8.8 (high)
Published
2026-08-20
Title
Abandoned Cart Pro for WooCommerce <= 10.4.0 - Unauthenticated Privilege Escalation
Fixed in
No known fix
CVSS
7.3 (high)
Published
2026-06-19
Title
Abandoned Cart Pro for WooCommerce < 10.4.1 - Subscriber+ Privilege Escalation
Fixed in
Fixed in 10.4.1
CVSS
8.8 (high)
Published
2025-06-09
Title
Abandoned Cart Pro for WooCommerce < 9.17.0 - Authenticated (Subscriber+) Arbitrary File Upload
Fixed in
Fixed in 9.17.0
CVSS
8.8 (high)