CVE-2026-92437

Name of the Vulnerable Software and Affected Versions Mailchimp for WooCommerce WordPress plugin versions prior to 6.3

Description An issue exists where the plugin fails to require authentication, a nonce (a unique token used to prevent replay attacks), or an ownership check before processing actions on a customer's abandoned-cart record. This allows an unauthenticated attacker to modify or delete stored cart data belonging to other customers by providing specific request-supplied data.

Recommendations Update the Mailchimp for WooCommerce WordPress plugin to version 6.3 or later.