CVE-2026-57637mediumCWE-352

CVE-2026-57637: falha de média gravidade em tychesoftwares Abandoned Cart Lite for…

WordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Request Forgery (CSRF) vulnerability

Publicada em

Seguir esta CVE+ Monitorar Abandoned Cart Lite for WooCommerce

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.1%
Unauthenticated Cross Site Request Forgery (CSRF) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
tychesoftwares · Abandoned Cart Lite for WooCommerce
CVEs relacionadas — tychesoftwares Abandoned Cart Lite for…

No mesmo produto, das mais perigosas para as menos.

CVE-2023-2986CRITICALAbandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication BypassEPSS 42.5%CVE-2019-25152HIGHAbandoned Cart Lite for WooCommerce < 5.2.0 and Abandoned Cart Pro for WooCommerce < 7.13.0 - Stored Cross-Site ScriptingEPSS 1.4%CVE-2023-41671MEDIUMWordPress Abandoned Cart Lite for WooCommerce plugin <= 5.16.1 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.5%CVE-2021-4414MEDIUMAbandoned Cart Lite for WooCommerce <= 5.8.5 - Cross-Site Request Forgery BypassEPSS 0.4%