CVE Intelligence

VillaTheme Abandoned Cart Recovery for WooCommerce vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting VillaTheme Abandoned Cart Recovery for WooCommerce: 2 record(s), with affected versions and fixes.

CVE-2026-57698 Medium · 6.5 CWE-288 Jul 13, 2026
WordPress Abandoned Cart Recovery for WooCommerce plugin <= 1.1.12 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in VillaTheme Abandoned Cart Recovery for WooCommerce woo-abandoned-cart-recovery allows Authentication Abuse.This issue affects Abandoned Cart Recovery for WooCommerce: from n/a through <= 1.1.12.
CVE-2026-32526 High · 7.1 CWE-79 Mar 25, 2026
WordPress Abandoned Cart Recovery for WooCommerce plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Abandoned Cart Recovery for WooCommerce woo-abandoned-cart-recovery allows Stored XSS.This issue affects Abandoned Cart Recovery for WooCommerce: from n/a through <= 1.1.10.