SMS Abandoned Cart Recovery – CartBoss

SMS Abandoned Cart Recovery – CartBoss has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of October 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for SMS Abandoned Cart Recovery – CartBoss has a vendor fix available, so running the current release closes it.

All of these findings were reported by Nguyen Xuan Chien. SMS Abandoned Cart Recovery – CartBoss is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all SMS Abandoned Cart Recovery – CartBoss vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2025-31865

SMS Abandoned Cart Recovery ✦ CartBoss <= 4.1.2 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records


2025-04-01 00:00	SMS Abandoned Cart Recovery ✦ CartBoss <= 4.1.2 - Missing Authorization SMS Abandoned Cart Recovery <= 4.1.2	`CVE-2025-31865`	4.3 Medium	Nguyen Xuan Chien	Yes

Showing 1–1 of 1 reports

Latestv4.5.8

SMS Abandoned Cart Recovery – CartBoss

Author

CartBoss

4.9(29)

98/100

Last Updated

2026-10-01 (27d ago)

Active Installs

400+

Downloads

18,625

Requires WP

6.0+

Requires PHP

7.4+

Tested up to

WP 7.1.3

Created

2021-05-28 (6y ago)

Requires Plugins

woocommerce

Win back abandoned carts with automatic SMS reminders and a discount already applied! Turn abandoned carts into orders with text reminders that send themselves. Connect your store and CartBoss texts each shopper in their own language, with a discount waiting in their cart. Adjust messages, timing and discounts to match your brand. Curious how it performs? See every message and recovered cart in your CartBoss dashboard. Do you have any questions? Our support team is one message away. Messages already written in 30+ languages, matched to each shopper. Single-use discount codes, applied the moment the shopper taps through. One tap restores the cart with the shopper’s details filled in. Works on WooCommerce Blocks and classic checkout, nothing to configure. Pay per message sent, no subscription & helpful customer support.

View on WordPress.org