CVE-2026-65557 Shop manager Cross Site Scripting (XSS) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions

Description

Shop manager Cross Site Scripting (XSS) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions.

Affected products and versions

Product	Affected versions	Fixed in
Abandoned Cart Lite for WooCommerce 6.8	earliest → 6.8.0	No fix stated

Other CVEs of Abandoned Cart Lite for WooCommerce

The 6 CVEs of Abandoned Cart Lite for WooCommerce →

CVE-2026-57637 Unauthenticated Cross Site Request Forgery (CSRF) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions 4.3 Medium CVE-2023-41671 Missing Authorization vulnerability in tychesoftwares Abandoned Cart Lite for WooCommerce woocommerce-abandoned-cart… 5.4 Medium CVE-2021-4414 The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions… 4.3 Medium CVE-2019-25152 The Abandoned Cart Lite for WooCommerce and Abandoned Cart Pro for WooCommerce plugins for WordPress are vulnerable to… 7.2 High