Advisories · Technology
Tyche Softwares Abandoned Cart Pro for WooCommerce.
Every CVE that names Tyche Softwares Abandoned Cart Pro for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated Authentication Bypass via Malleable Encryption and Bypassable HMAC via Recovery Link 'validate' Parameter
- Tyche Softwares Abandoned Cart Pro for WooCommerce
- Broken access control
- CVSS 7.5 High
Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via AES-CTR Ciphertext Forgery in 'validate' Parameter
- Tyche Softwares Abandoned Cart Pro for WooCommerce
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via Guest Persistent Cart meta_value
- Tyche Softwares Abandoned Cart Pro for WooCommerce
- SQL injection
- CVSS 8.8 High
Abandoned Cart Pro for WooCommerce <= 10.7.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
- Tyche Softwares Abandoned Cart Pro for WooCommerce
- Privilege escalation
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability
- Tyche Softwares. Abandoned Cart Pro for WooCommerce
- Privilege escalation
- CVSS 8.8 High
WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability
- Tyche Softwares. Abandoned Cart Pro for WooCommerce
- Privilege escalation
- CVSS 8.8 High
Abandoned Cart Pro for WooCommerce <= 9.16.0 - Authenticated (Subscriber+) Arbitrary File Upload
- Tyche Softwares Abandoned Cart Pro for WooCommerce
- Unrestricted file upload