PT-2026-28040 · Automattic+1 · Woocommerce+1
CVE-2026-32526
·
Publicado
2026-03-25
·
Atualizado
2026-04-08
CVSS v3.1
7.1
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
VillaTheme Abandoned Cart Recovery for WooCommerce versions through 1.1.10
Description
The software contains an Improper Neutralization of Input During Web Page Generation issue, specifically a Cross-site Scripting condition. This allows for Stored XSS attacks. The vulnerability exists due to insufficient input sanitization during web page generation. The affected component is Abandoned Cart Recovery for WooCommerce.
Recommendations
Update VillaTheme Abandoned Cart Recovery for WooCommerce to a version later than 1.1.10.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Abandoned Cart Recovery For Woocommerce
Woocommerce