Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce plugin <= 5.15.2 versions.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:LTychesoftwares Abandoned Cart Lite For Woocommerce
APPTychesoftwares< 5.16.0
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
XSS
Related vulnerabilities
CVE-2023-2986CRITICAL9.8ten sam produkt
The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to authentication bypass in version...
CVE-2019-25152HIGH7.2ten sam produkt
The Abandoned Cart Lite for WooCommerce and Abandoned Cart Pro for WooCommerce plugins for WordPress are vulne...
CVE-2021-4414MEDIUM4.3ten sam produkt
The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in ve...
CVE-2025-2907CRITICAL9.8PL ✓ten sam vendor
CSRF i brak autoryzacji w wtyczce Order Delivery Date Pro for WooCommerce umożliwiają przejęcie witryny
CVE-2025-2929HIGH7.1ten sam vendor
The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputt...