CVE ID :CVE-2026-97657 Published : Oct. 14, 2026, 3:17 a.m. | 15 minutes ago Description :The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via Malleable Encryption and Bypassable HMAC in all versions up to, and including, 10.8.0. This is due...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-97657 - Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated Authentication Bypass via Malleable Encryption and Bypassable HMAC via Recovery Link 'validate' Parameter

VERWANDTEARTIKEL

CVE-2026-110459 - UniFi Protect AI Key Improper Access Control Vulnerability

CVE-2026-110455 - UniFi Protect AI Key Command Injection Vulnerability

CVE-2026-105429 - NetBird client SSH config Match line injection via peer FQDN or hostname allows local command execution

CVE-2026-106931 - SiteGuard Server Edition OS Command Injection Vulnerability

CVE-2026-110450 - Nix and Lix Privilege Escalation Vulnerability

CVE-2026-87855 - JTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated Arbitrary File Upload via 'image.push' Method