Vendor
critical
advisory
Authentication Bypass in Abandoned Cart Pro for WooCommerce
1 rule 1 TTP 1 CVEAn unauthenticated authentication bypass vulnerability (CVE-2026-97657) in Abandoned Cart Pro for WooCommerce versions 10.8.0 and earlier allows attackers to perform account takeovers via XOR-malleation of recovery tokens.
Abandoned Cart Pro for WooCommerce
authentication-bypass
web-application
wordpress
cve-2026-97657
1r
1t
1c
high
advisory
Privilege Escalation in Abandoned Cart Pro for WooCommerce
1 rule 1 TTP 1 CVEThe Abandoned Cart Pro for WooCommerce plugin is vulnerable to privilege escalation allowing authenticated subscribers to hijack administrative accounts by intercepting SMTP settings and email recovery tokens.
Abandoned Cart Pro for WooCommerce
privilege-escalation
wordpress
plugin
web-vulnerability
1r
1t
1c