CRITICAL 9.8 CVE-2026-66682 Published 20 Aug 2026

WooCommerce Abandoned Cart Pro Privilege Escalation

Worried this affects one of your servers?

A critical vulnerability exists in the Abandoned Cart Pro plugin for WooCommerce, versions 10.4.0 and below.

Affected Product: WooCommerce Abandoned Cart Pro Plugin

Vulnerability Type: Unauthenticated Privilege Escalation

Exploiting this issue allows attackers to gain unauthorized access to the WordPress admin dashboard.