PT-2024-12953 · Woocommerce · Abandoned Cart Lite For Woocommerce

Mika · Published 2024-12-13 · Updated 2024-12-17 · CVE-2023-41671

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Abandoned Cart Lite for WooCommerce versions n/a through 5.16.1

Description The issue affects Abandoned Cart Lite for WooCommerce due to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This vulnerability can be exploited through Cross-Site Request Forgery (CSRF).

Recommendations Update to the latest version to secure your site.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2023-41671

Affected Products

Abandoned Cart Lite For Woocommerce

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2023-41671 · Security Note
• https://twitter.com/transilienceai/status/1868887276094198111 · Twitter Post
• https://twitter.com/transilienceai/status/1868887285950746727 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/woocommerce-abandoned-cart/vulnerability/wordpress-abandoned-cart-lite-for-woocommerce-plugin-5-16-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://twitter.com/transilienceai/status/1868525360138084675 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/woocommerce-abandoned-cart/vulnerability/wordpress-abandoned-cart-lite-for-woocommerce-plugin-5-16-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://twitter.com/transilienceai/status/1868525369675989193 · Twitter Post
• https://twitter.com/transilienceai/status/1868525377624166895 · Twitter Post
• https://twitter.com/CVEnew/status/1867908536233005156 · Twitter Post
• https://twitter.com/transilienceai/status/1868887266669502769 · Twitter Post