Abandoned Cart Pro for WooCommerce

Abandoned Cart Pro for WooCommerce has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; 3 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 8.4, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 4 high. 2026 was the busiest year with 3 disclosures.

The most common weakness is Improper Privilege Management, behind 2 of the records (50%). Other recurring categories include Incorrect Privilege Assignment, Unrestricted Upload Of File With Dangerous Type.

3 of the records (75%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

3 independent researchers contributed these findings, most of them (2) reported by Austin Ginder.

Strategic Overview

Avg CVSSHigh

8.4/ 10

Patch Coverage75%

Open

Fixed

Get automatic notifications for all Abandoned Cart Pro for WooCommerce vulnerabilities before they are exploited.

Most severe open issueCVSS 7.3CVE-2026-66682

Abandoned Cart Pro for WooCommerce <= 10.4.0 - Unauthenticated Privilege Escalation

Read the full analysis

Vulnerability Records

4 records


2026-09-04 00:00	Abandoned Cart Pro for WooCommerce <= 10.7.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation Abandoned Cart Pro for WooCommerce <= 10.7.1	`CVE-2026-81543`	8.8 High	d.v4n_s3c	Yes
2026-08-20 00:00	Abandoned Cart Pro for WooCommerce <= 10.4.0 - Unauthenticated Privilege Escalation Abandoned Cart Pro for WooCommerce <= 10.4.0	`CVE-2026-66682`	7.3 High	Austin Ginder	No
2026-06-19 00:00	Abandoned Cart Pro for WooCommerce <= 10.4.0 - Authenticated (Subscriber+) Privilege Escalation Abandoned Cart Pro for WooCommerce <= 10.4.0	`CVE-2026-56010`	8.8 High	Austin Ginder	Yes
2025-06-09 15:30	Abandoned Cart Pro for WooCommerce <= 9.16.0 - Authenticated (Subscriber+) Arbitrary File Upload Abandoned Cart Pro for WooCommerce <= 9.16.0	`CVE-2025-4387`	8.8 High	Phil Wylie (mustardbees)	Yes

Showing 1–4 of 4 reports