CVE-2026-39470

HighCVSS 7.2

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 16/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

The WooCommerce Cart Abandonment Recovery plugin versions below 2.1.0 have a vulnerability that allows for shop manager privilege escalation.

An attacker could gain elevated privileges, potentially leading to unauthorized access to administrative data or functions.

It is recommended to update the plugin to version 2.1.0 or later to mitigate this vulnerability.

Original NVD description (English source)

Shop manager Privilege Escalation in WooCommerce Cart Abandonment Recovery < 2.1.0 versions.