Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Abandoned Cart Pro for WooCommerce — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Abandoned Cart Pro for WooCommerce, with AI-generated Chinese analysis, references, and POCs.

Vendor: Tyche Softwares

CVE ID Title CVSS Severity Published
CVE-2026-97657 Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated Authentication Bypass via Malleable Encryption and Bypassable HMAC via Recovery Link 'validate' Parameter CWE-639 9.8 Critical 2026-10-14
CVE-2026-102251 Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via AES-CTR Ciphertext Forgery in 'validate' Parameter CWE-89 7.5 High 2026-10-14
CVE-2026-97668 Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via Guest Persistent Cart meta_value CWE-89 9.8 Critical 2026-10-14
CVE-2026-81543 Abandoned Cart Pro for WooCommerce <= 10.7.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation CWE-269 8.8 High 2026-09-05
CVE-2026-66682 WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability CWE-266 9.8 Critical 2026-08-20
CVE-2026-56010 WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability CWE-266 8.8 High 2026-06-26
CVE-2025-4387 Abandoned Cart Pro for WooCommerce <= 9.16.0 - Authenticated (Subscriber+) Arbitrary File Upload CWE-434 8.8 High 2025-06-10

All 7 known CVE vulnerabilities affecting Abandoned Cart Pro for WooCommerce with full Chinese analysis, references, and POCs where available.