WordPress security by component

Abandoned Cart Recovery for WooCommerce

Plugin description

Abandoned Cart Recovery for WooCommerce is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jul 01, 2023; the highest CVE/CNA score is 4.3.

Plugin slug: abandoned-cart-recovery-for-woocommerce

Latest vulnerability

CVE-2021-4395: Abandoned Cart Recovery for WooCommerce: Cross-site request forgery

Abandoned Cart Recovery for WooCommerce is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.

PublishedJul 01, 2023

Safe version guidanceSee mitigation notes

		Safe version
Jul 01, 2023	CVE-2021-4395 Abandoned Cart Recovery for WooCommerce: Cross-site request forgery Abandoned Cart Recovery for WooCommerce is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE4.3 NVD6.5