PT-2026-52740

CVE-2026-56010

·

Published

2026-06-19

·

Updated

2026-06-26

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Abandoned Cart Pro for WooCommerce versions prior to 10.4.1
Description The Abandoned Cart Pro for WooCommerce plugin for WordPress allows authenticated attackers with Subscriber-level access or higher to elevate their privileges to those of an administrator.
Recommendations Update the plugin to a version later than 10.4.0.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-266: Incorrect Privilege Assignment
Related identifiers
CVE-2026-56010
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com