SMS Abandoned Cart Recovery ✦ CartBoss

SMS Abandoned Cart Recovery ✦ CartBoss has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for SMS Abandoned Cart Recovery ✦ CartBoss has a vendor fix available, so running the current release closes it.

All of these findings were reported by Nguyen Xuan Chien. SMS Abandoned Cart Recovery ✦ CartBoss is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all SMS Abandoned Cart Recovery ✦ CartBoss vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2025-31865

SMS Abandoned Cart Recovery ✦ CartBoss <= 4.1.2 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records
SMS Abandoned Cart Recovery ✦ CartBoss banner
Latestv4.2.1

SMS Abandoned Cart Recovery ✦ CartBoss

CartBoss

Author

CartBoss

4.9(29)
98/100
Last Updated
2025-12-05 (9mo ago)
Active Installs
400+
Downloads
17,378
Requires WP
5.0+
Requires PHP
7.2+
Tested up to
WP 6.8.8
Created
2021-05-28 (5y ago)

🔥Start sending abandoned cart text messages (SMS), improve your customer lifetime value, and reduce dead stock in less than 5 minutes Boost your sales by recovering abandoned carts with pre-prepared & translated text messages. Recover lost sales, increase customer loyalty, and reduce inventory waste with the power of SMS! In just under 5 minutes, you can start using our SMS abandoned cart solution to achieve all these goals without having to worry about writing messages, translating them, or setting up discount codes. Our user-friendly system works right out of the box, automatically detecting the recipient’s language and generating discounts on the spot. When we say Plug & Play, we mean it! Seamless integration Connect your WooCommerce store with our plugin in a matter of minutes. No copywriting work Existing library of pre-written and highly converting text messages. No translation costs Text messages are already translated into 30+ European languages. No A/B testing needed We tested and selected only the messages that achieved statistically significant results. Advanced user matching CartBoss matches your visitors by country, language & pre-filled fields, so they will get personalized messages in their own language. Lift your conversion rate Auto-populate checkout fields To ensure the checkout process is quick and easy, CartBoss auto-fills checkout fields with the visitor’s information. Personalized and dynamic content Messages can include the recipient’s name, their cart content, and discount value. Auto-generate coupons Coupons are generated automatically and embedded into SMS links so they are auto-applied in the checkout process. Website preloader Minimize the bounce rate and make your brand look more professional – our preloader can show the name of the customer, their cart content, and much more! 30+ countries & languages out of the box GRPR compliant WPML ready Resources friendly Plug & Play SMS Abandoned Cart Recovery – CartBoss is compatible with WPML!

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C