Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-97657

1 brief RSS
critical advisory

Authentication Bypass in Abandoned Cart Pro for WooCommerce

An unauthenticated authentication bypass vulnerability (CVE-2026-97657) in Abandoned Cart Pro for WooCommerce versions 10.8.0 and earlier allows attackers to perform account takeovers via XOR-malleation of recovery tokens.

Abandoned Cart Pro for WooCommerce authentication-bypass web-application wordpress cve-2026-97657
1r 1t 1c