WordPress plugin

Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD security & vulnerabilities

Q: Is any Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD vulnerability listed in CISA KEV?

No. None of the known Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD vulnerabilities is currently listed in the CISA KEV catalog.

cart-lift— active installsLast vulnerability Jul 8, 2026

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

Watch plugin

4Known vulnerabilities

Critical0
High1
Medium3
Low0

Vulnerabilities per year

All Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD vulnerabilities

Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD vulnerabilities
Severity	Vulnerability	CVE	Published
High7.2	Unauthenticated Stored Cross-Site Scripting ≤3.1.57Update to 3.1.58	CVE-2026-57417	Jul 08
Medium6.1	Reflected Cross-Site Scripting via cart_search ≤3.1.5Update to 3.1.6	CVE-2022-47449	Mar 2, 2023
Medium4.3	Missing Authorization ≤3.6.0Update to 3.6.1	—	Dec 16, 2022
Medium4.3	Cross-Site Request Forgery ≤3.6.0Update to 3.6.1	CVE-2022-47150	Dec 14, 2022

High7.2
Unauthenticated Stored Cross-Site Scripting
≤3.1.57Update to 3.1.58
CVE-2026-57417Jul 08
Medium6.1
Reflected Cross-Site Scripting via cart_search
≤3.1.5Update to 3.1.6
CVE-2022-47449Mar 2, 2023
Medium4.3
Missing Authorization
≤3.6.0Update to 3.6.1
84003388-c47c-41db-8d2d-4643aa375a89Dec 16, 2022
Medium4.3
Cross-Site Request Forgery
≤3.6.0Update to 3.6.1
CVE-2022-47150Dec 14, 2022

Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD: common questions

Does Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD have known vulnerabilities?

Yes. VulnCrest Radar lists 4 known vulnerabilities in Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD: 1 high, 3 medium. At least one is not fixed in the latest version.

How do I check which version of Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD vulnerability?

CVE-2026-57417, published Jul 8, 2026: Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD <= 3.1.57 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).

Is any Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD vulnerability listed in CISA KEV?

No. None of the known Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD vulnerabilities is currently listed in the CISA KEV catalog.