Known Vulnerabilities for Cart All In One For Woocommerce by Villatheme
Listed below are 1 of the newest known vulnerabilities associated with "Cart All In One For Woocommerce" by "Villatheme".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-66682 json | Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions. | Not Provided | 2026-08-20 | 2026-08-20 |
| CVE-2026-66466 json | Unauthenticated Broken Access Control in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Q... | Not Provided | 2026-08-13 | 2026-08-13 |
| CVE-2026-65557 json | Shop manager Cross Site Scripting (XSS) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions. | Not Provided | 2026-07-27 | 2026-07-27 |
| CVE-2026-57857 json | The Flow Payment plugin for WordPress (flow.cl) version 3.0.8 is vulnerable to reflected cross-site scripting on the WooComme... | Not Provided | 2026-07-18 | 2026-07-20 |
| CVE-2026-57698 json | Authentication Bypass Using an Alternate Path or Channel vulnerability in VillaTheme Abandoned Cart Recovery for WooCommerce ... | Not Provided | 2026-07-13 | 2026-07-13 |
| CVE-2026-57637 json | Unauthenticated Cross Site Request Forgery (CSRF) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions. | Not Provided | 2026-06-26 | 2026-06-26 |
| CVE-2026-56010 json | Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions. | Not Provided | 2026-06-26 | 2026-06-26 |
| CVE-2026-39470 json | Shop manager Privilege Escalation in WooCommerce Cart Abandonment Recovery < 2.1.0 versions. | Not Provided | 2026-06-15 | 2026-06-15 |
| CVE-2026-18603 json | The PiWeb Cancel order / Refund request for WooCommerce WordPress plugin before 1.3.4.34 does not have authorization or owner... | Not Provided | 2026-08-09 | 2026-08-10 |
| CVE-2026-17166 json | The Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar plugin for WordPress is... | Not Provided | 2026-07-29 | 2026-07-29 |