https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 19:03:15 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-96900 <p>The Cart Abandonment Recovery for WooCommerce WordPress plugin before 2.1.4 does not verify ownership of the email address used to select an abandoned-cart record before deleting or overwriting it, allowing unauthenticated attackers who know a customer&#39;s email to destroy or tamper with that customer&#39;s stored abandoned-cart data.</p> <p>The Cart Abandonment Recovery for WooCommerce WordPress plugin before 2.1.4 does not verify ownership of the email address used to select an abandoned-cart record before deleting or overwriting it, allowing unauthenticated attackers who know a customer&#39;s email to destroy or tamper with that customer&#39;s stored abandoned-cart data.</p> https://db.gcve.eu/vuln/fkie_cve-2026-96900 https://db.gcve.eu/vuln/ghsa-2rr9-5p4c-w9r4 <p>The Cart Abandonment Recovery for WooCommerce WordPress plugin before 2.1.4 does not verify ownership of the email address used to select an abandoned-cart record before deleting or overwriting it, allowing unauthenticated attackers who know a customer&#39;s email to destroy or tamper with that customer&#39;s stored abandoned-cart data.</p> <p>The Cart Abandonment Recovery for WooCommerce WordPress plugin before 2.1.4 does not verify ownership of the email address used to select an abandoned-cart record before deleting or overwriting it, allowing unauthenticated attackers who know a customer&#39;s email to destroy or tamper with that customer&#39;s stored abandoned-cart data.</p> https://db.gcve.eu/vuln/ghsa-2rr9-5p4c-w9r4