Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: CartFlows Component: Woocommerce Cart Abandonment Recovery Clear all filters
TI-2024-02158 CVE-2024-2322 · GHSA-rfj8-v7wf-3hfc

WooCommerce Cart Abandonment Recovery < 1.2.27 - Templates/Abandoned Orders Deletion via CSRF

Priority MEDIUM 63

The WooCommerce Cart Abandonment Recovery WordPress plugin before 1.2.27 does not have CSRF check in its bulk actions, which could allow attackers to make logged in admins delete arbitrary email templates as well as dele…

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00353 Published 2024-04-03 Fixed in 1.2.27 CWE-352