The Abandoned Cart Pro for WooCommerce plugin for WordPress has a critical vulnerability allowing unauthenticated attackers to bypass authentication and potentially take over user accounts, including administrators. This is due to insecure encryption and HMAC checks in cart-recovery link tokens. Attackers can recover the keystream, forge ciphertext, and trigger a call to wp_set_auth_cookie() for the victim user.
The Abandoned Cart Pro for WooCommerce plugin for WordPress, versions up to and including 10.8.0, is vulnerable to unauthenticated SQL injection via the 'validate' parameter. This vulnerability, classified as high-severity, allows attackers to append additional SQL queries to existing ones, potentially leading to sensitive information disclosure from the database. The vulnerability arises from insufficien [truncated]
The Abandoned Cart Pro for WooCommerce plugin for WordPress has a critical vulnerability allowing unauthenticated SQL injection via the guest cart persistent meta_value. This issue affects all versions up to and including 10.8.0 due to insufficient escaping of user-supplied data and lack of preparation on existing SQL queries in the update_guest_persistent_cart() function.
The Abandoned Cart Pro for WooCommerce plugin for WordPress has a privilege escalation vulnerability in all versions up to, and including, 10.7.1. Authenticated attackers with subscriber-level access and above can modify SMTP connector settings to intercept administrator recovery emails and auto-login links, potentially gaining full administrative access if the plugin's auto-login feature is enabled.
