WordPress plugin
Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium3
- Low0
All Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Unauthenticated Abandoned Cart Takeover <2.2.0Update to 2.2.0 | CVE-2026-96901 | |
| Medium5.3 | Unauthenticated Insecure Direct Object Reference <2.1.4Update to 2.1.4 | CVE-2026-96900 | |
| High7.2 | Authenticated (Shop Manager+) Privilege Escalation <2.1.0Update to 2.1.0 | CVE-2026-39470 | |
| Medium4.3 | Cross-Site Request Forgery to Templates/Abandoned Orders Deletion ≤1.2.26Update to 1.2.27 | CVE-2024-2322 |
- Medium5.3Unauthenticated Abandoned Cart Takeover
<2.2.0Update to 2.2.0
- Medium5.3Unauthenticated Insecure Direct Object Reference
<2.1.4Update to 2.1.4
- High7.2Authenticated (Shop Manager+) Privilege Escalation
<2.1.0Update to 2.1.0
- Medium4.3Cross-Site Request Forgery to Templates/Abandoned Orders Deletion
≤1.2.26Update to 1.2.27
Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails: common questions
Does Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails: 1 high, 3 medium. None are known to affect version null.
How do I check which version of Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails vulnerability?
CVE-2026-96901, published Oct 19, 2026: Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails < 2.2.0 - Unauthenticated Abandoned Cart Takeover. Severity: Medium (CVSS 5.3).
Is any Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails vulnerability listed in CISA KEV?
No. None of the known Cart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails vulnerabilities is currently listed in the CISA KEV catalog.