Woo Save Abandoned Carts Vulnerabilities

[en] Cross-Site Request Forgery (CSRF) vulnerability in Streamline.Lv CartBounty – Save and recover abandoned carts for WooCommerce allows Cross Site Request Forgery.This issue affects CartBounty – Save and recover abandoned carts for WooCommerce: from n/a through 8.2.

Affected:

up to 8.2.1

Fixed in:

8.2.1

Disclosed:

Oct 20, 2024

CVE-2024-47634 on NVD →

The CartBounty – Save and recover abandoned carts for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to delete carts via a forged...

CVSS:

4.3

Affected:

up to 8.2

Fixed in:

8.2.1

Disclosed:

Sep 30, 2024

CVE-2024-47634 on NVD →