Smoove abandoned cart trigger for WooCommerce vulnerabilities
We track 1 vulnerability in Smoove abandoned cart trigger for WooCommerce products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 11, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Smoove abandoned cart trigger for WooCommerce vulnerabilities
- 8.8 High severity
Smoove abandoned cart trigger for WooCommerce: Improper Neutralization of Input During Web Page Generation
The Smoove abandoned cart trigger for WooCommerce WordPress plugin before 4.3.6 does not sanitise and escape abandoned-cart data submitted by visitors before outputting it in the admin dashboard, allowing unauthenticated users to perform Stored Cross-Site Scri