PT-2024-12953
CVE-2023-41671
·
Published
2023-11-28
·
Updated
2024-12-17
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Abandoned Cart Lite for WooCommerce versions n/a through 5.16.1
Description
The issue affects Abandoned Cart Lite for WooCommerce due to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This vulnerability can be exploited through Cross-Site Request Forgery (CSRF).
Recommendations
Update to the latest version to secure your site.
Found an issue in the description? Have something to add? Feel free to write us 👾