Wpclever
Wpclever Abandoned Cart PRO: vulnerabilities and CVEs
Wpclever Abandoned Cart PRO has 2 published vulnerabilities, 2 of them in the last 12 months. 1 are rated critical and 0 are listed by CISA as actively exploited.
CVEs2
Last 12 months2
Critical1
Actively exploited0
All vulnerabilities in the catalogue →⭐ Follow this technology
Latest vulnerabilities
| CVE | Severity | EPSS | Active exploitation | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-97657 | Critical (9.8) | 0.38% | — | Oct 14, 2026 | The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via Malleable Encryption and Bypassable HMAC in all versions up to, and including, 10.8.0. This is due to the use of… |
| CVE-2026-102251 | High (7.5) | 0.38% | — | Oct 14, 2026 | The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'validate' parameter in all versions up to, and including, 10.8.0 due to insufficient escaping on the user… |
🎯 How it gets exploited (ATT&CK techniques)
Number of CVEs of this technology mapped to each exploitation or primary-impact technique.
Other products by Wpclever
WPC Smart Messages · 4WPC Smart Wishlist FOR Woocommerce · 3WPC Smart Quick View · 3WPC Smart Wishlist · 3WPC Admin Columns · 2WPC Smart Compare · 2WPC Product Bundles · 2WPC Badge Management · 2WPC Name Your Price · 2WPC Shop AS A Customer · 2WPC Product Options · 2WPC Frequently Bought Together · 1