Advisories · Technology

Tychesoftwares Abandoned Cart Lite for WooCommerce.

Every CVE that names Tychesoftwares Abandoned Cart Lite for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-65557 CVE record

CVSS 5.9 Medium

WordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Scripting (XSS) vulnerability
- Tychesoftwares Abandoned Cart Lite for WooCommerce
- Cross-site scripting (XSS)
Not analysed yet 27 Jul 2026
CVE-2026-57637 CVE record

CVSS 4.3 Medium

WordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Request Forgery (CSRF) vulnerability
- tychesoftwares Abandoned Cart Lite for WooCommerce
- Cross-site request forgery (CSRF)
Not analysed yet 26 Jun 2026
CVE-2023-41671 CVE record

CVSS 5.4 Medium

WordPress Abandoned Cart Lite for WooCommerce plugin <= 5.16.1 - Cross Site Request Forgery (CSRF) vulnerability
- tychesoftwares Abandoned Cart Lite for WooCommerce
- Broken access control
Not analysed yet 13 Dec 2024
CVE-2021-4414 CVE record

CVSS 4.3 Medium

Abandoned Cart Lite for WooCommerce <= 5.8.5 - Cross-Site Request Forgery Bypass
- tychesoftwares Abandoned Cart Lite for WooCommerce
- Cross-site request forgery (CSRF)
Not analysed yet 12 Jul 2023
CVE-2019-25152 CVE record

CVSS 7.2 High

Abandoned Cart Lite for WooCommerce < 5.2.0 and Abandoned Cart Pro for WooCommerce < 7.13.0 - Stored Cross-Site Scripting
- tychesoftwares Abandoned Cart Lite for WooCommerce
- TYCHE Abandoned Cart Pro for WooCommerce
- Cross-site scripting (XSS)
Not analysed yet 22 Jun 2023
CVE-2023-2986 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypass
- tychesoftwares Abandoned Cart Lite for WooCommerce
- Authentication bypass
Not analysed yet 8 Jun 2023