ActiveCampaign for WooCommerce
ActiveCampaign for WooCommerce has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2022; all 2 are fixed as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 6.5 out of 10. 2022 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Missing Authorization.
Every one of the 2 issues recorded for ActiveCampaign for WooCommerce has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by István Márton. ActiveCampaign for WooCommerce is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2022-3923ActiveCampaign for WooCommerce <= 1.9.7 - Cross-Site Request Forgery
Read the full analysisVulnerability Records
ActiveCampaign for WooCommerce
Author
ActiveCampaign
ActiveCampaign is the autonomous marketing platform built to transform how marketers, agencies, and business owners work. Use Active Intelligence to power goal-aware automations and orchestrate personalized experiences across email, SMS, and WhatsApp. Effortlessly integrate with 1000+ apps, uncover deep performance insights, and optimize your workflows so you win every day. ActiveCampaign’s Capabilities Autonomous marketing Built on the foundation of marketing automation, fuel your marketing strategy and customer journeys with AI-driven execution, optimization, and insight at every step. AI agents Run entire marketing campaigns through simple prompts, backed by Active Intelligence. Cross-channel marketing Reach prospects and customers wherever they are, with email, SMS, WhatsApp, and more. On-brand, personalized content Creative tools that deliver professional, conversion-ready designs for email and landing pages. CRM Track, manage, and automate your sales process. 1000+ apps & integrations Connect ActiveCampaign to your favorite tools. WooCommerce + ActiveCampaign Send real-time store data directly to ActiveCampaign Engage customers with automated abandoned cart and post-purchase emails. Personalize email, SMS, and WhatsApp messages with purchase data. Showcase specific product catalogs in your marketing emails. Here’s what you’ll need to configure this integration: WooCommerce 7.4 (or more recent version) The ActiveCampaign for WooCommerce WordPress plugin 2.10.2 . Learn more: Connect WooCommerce to ActiveCampaign
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C