PT-2026-78980 · WordPress · Abandoned Cart Pro

CVE-2026-66682

·

Published

2026-08-20

·

Updated

2026-08-27

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Abandoned Cart Pro for WooCommerce versions prior to 10.4.1
Description An issue allows unauthenticated users to perform privilege escalation.
Recommendations Update Abandoned Cart Pro for WooCommerce to version 10.4.1 or later.

Fix

LPE

Incorrect Privilege Assignment

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2026-66682

Affected Products

Abandoned Cart Pro