SMS Abandoned Cart Recovery ✦ CartBoss
SMS Abandoned Cart Recovery ✦ CartBoss has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for SMS Abandoned Cart Recovery ✦ CartBoss has a vendor fix available, so running the current release closes it.
All of these findings were reported by Nguyen Xuan Chien. SMS Abandoned Cart Recovery ✦ CartBoss is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2025-31865SMS Abandoned Cart Recovery ✦ CartBoss <= 4.1.2 - Missing Authorization
Read the full analysisVulnerability Records

SMS Abandoned Cart Recovery ✦ CartBoss
Author
CartBoss
🔥Start sending abandoned cart text messages (SMS), improve your customer lifetime value, and reduce dead stock in less than 5 minutes Boost your sales by recovering abandoned carts with pre-prepared & translated text messages. Recover lost sales, increase customer loyalty, and reduce inventory waste with the power of SMS! In just under 5 minutes, you can start using our SMS abandoned cart solution to achieve all these goals without having to worry about writing messages, translating them, or setting up discount codes. Our user-friendly system works right out of the box, automatically detecting the recipient’s language and generating discounts on the spot. When we say Plug & Play, we mean it! Seamless integration Connect your WooCommerce store with our plugin in a matter of minutes. No copywriting work Existing library of pre-written and highly converting text messages. No translation costs Text messages are already translated into 30+ European languages. No A/B testing needed We tested and selected only the messages that achieved statistically significant results. Advanced user matching CartBoss matches your visitors by country, language & pre-filled fields, so they will get personalized messages in their own language. Lift your conversion rate Auto-populate checkout fields To ensure the checkout process is quick and easy, CartBoss auto-fills checkout fields with the visitor’s information. Personalized and dynamic content Messages can include the recipient’s name, their cart content, and discount value. Auto-generate coupons Coupons are generated automatically and embedded into SMS links so they are auto-applied in the checkout process. Website preloader Minimize the bounce rate and make your brand look more professional – our preloader can show the name of the customer, their cart content, and much more! 30+ countries & languages out of the box GRPR compliant WPML ready Resources friendly Plug & Play SMS Abandoned Cart Recovery – CartBoss is compatible with WPML!
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C