CVE-2022-2389

Name of the Vulnerable Software and Affected Versions The Abandoned Cart Recovery for WooCommerce, Follow Up Emails, Newsletter Builder & Marketing Automation By Autonami WordPress plugin versions prior to 2.1.2

Description The issue concerns a lack of authorization and CSRF checks in one of the plugin's AJAX actions. This allows any authenticated user, such as a subscriber, to create automations.

Recommendations For versions prior to 2.1.2, update to version 2.1.2 or later to resolve the issue.