CyberRota Analysis
AI-GeneratedThe Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to privilege escalation due to inadequate capability checks and nonce verification on several AJAX actions, affecting all versions up to 10.7.1. This flaw allows authenticated attackers with subscriber-level access or higher to alter SMTP settings, potentially redirecting administrator recovery emails through a malicious server and intercepting auto-login links, leading to full administrative access. WordPress site administrators using this plugin should prioritize immediate updates to mitigate this high-severity vulnerability.
Original NVD Description
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.7.1. This is due to missing capability checks and nonce verification on multiple AJAX actions including wcap_save_connector_settings, wcap_send_manual_email, wcap_abandoned_cart_info, and wcap_change_manual_email_data. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify SMTP connector settings to route administrator recovery emails through an attacker-controlled server and intercept auto-login links to gain full administrative access. The plugin's auto-login feature must be enabled, which is the default configuration.