WooCommerce Recover Abandoned Cart vulnerabilities

2 known vulnerabilities in WooCommerce Recover Abandoned Cart from FantasticPlugins. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  WooCommerce Recover Abandoned Cart: Missing Authorization

  CVE-2025-64222Dec 18, 2025FantasticPlugins

  Missing Authorization vulnerability in FantasticPlugins WooCommerce Recover Abandoned Cart rac allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Recover Abandoned Cart: from n/a through <= 24.6.0.

• 8.1 High severity

  WooCommerce Recover Abandoned Cart: Deserialization of Untrusted Data

  CVE-2025-0956Mar 5, 2025FantasticPlugins

  The WooCommerce Recover Abandoned Cart plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 24.4.0 via deserialization of untrusted input from the 'raccookie_guest_email' cookie. This makes it possible for unauthenti