SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-66682

CRITICAL · CVSS 9.8 EPSS 0.33%

Source: NVD + CISA KEV + EPSS · Published 2026-08-20 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

Abandoned Cart Pro for WooCommerce versions up to 10.4.0 are susceptible to an unauthenticated privilege escalation vulnerability, allowing attackers to gain elevated access without proper authentication. This critical flaw can lead to unauthorized actions within the application, potentially compromising sensitive data and functionality. E-commerce platforms utilizing this plugin should prioritize immediate updates to mitigate the risk of exploitation.

CVE
CVE-2026-66682
Severity
CRITICAL
CVSS
9.8
EPSS
0.33%

Original NVD Description

Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions.