Product
An unauthenticated SQL injection vulnerability in the Abandoned Cart Pro for WooCommerce plugin allows attackers to exfiltrate data or escalate privileges to administrator by modifying user metadata.