Read the docs

CartFlows

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

CartFlows records in CISA KEV

No CartFlows vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cartflows 4 records LOW Woocommerce Cart Abandonment Recovery 1 record MEDIUM

Records

1 record in Woocommerce Cart Abandonment Recovery · all components

TI-2024-02158 CVE-2024-2322 · GHSA-rfj8-v7wf-3hfc

WooCommerce Cart Abandonment Recovery < 1.2.27 - Templates/Abandoned Orders Deletion via CSRF

Priority MEDIUM 63

The WooCommerce Cart Abandonment Recovery WordPress plugin before 1.2.27 does not have CSRF check in its bulk actions, which could allow attackers to make logged in admins delete arbitrary email templates as well as dele…

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00353 Published 2024-04-03 Fixed in 1.2.27 CWE-352
Open these records in search →