CVE-2026-66682

CriticalCVSS 9.8

Published: 20/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 20/08/2026(UTC)NVD NIST

Summary

Unauthenticated privilege escalation vulnerability in the Abandoned Cart Pro for WooCommerce plugin. Affects versions up to 10.4.0.

An unauthenticated attacker can escalate privileges, potentially leading to admin account takeover and full site control.

Immediately update the Abandoned Cart Pro for WooCommerce plugin to the latest version that fixes this vulnerability.

Original NVD description (English source)

Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions.