WordPress plugin
Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium3
- Low0
All Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD vulnerabilities
Nothing in this view
No vulnerabilities match this filter. Show all.
Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD: common questions
Does Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD: 1 high, 3 medium. At least one is not fixed in the latest version.
How do I check which version of Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD vulnerability?
CVE-2026-57417, published Jul 8, 2026: Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD <= 3.1.57 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).
Is any Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD vulnerability listed in CISA KEV?
No. None of the known Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD vulnerabilities is currently listed in the CISA KEV catalog.