Cross Site Scripting Vulnerability in Abandoned Cart Lite for WooCommerce
CVE-2026-65557

5.9MEDIUM

Key Information:

Vendor

WordPress
Status
Abandoned Cart Lite For WooCommerce
Vendor
CVE Published:
27 July 2026

What is CVE-2026-65557?

A Cross Site Scripting (XSS) vulnerability exists in Abandoned Cart Lite for WooCommerce, affecting all versions up to 6.8.0. This security flaw could allow attackers to inject malicious scripts into web pages, potentially compromising user data and the integrity of the website. It is crucial for users to upgrade to the latest version to mitigate this risk and enhance their site’s security.

Affected Version(s)

Abandoned Cart Lite for WooCommerce <= 6.8.0

References

https://patchstack.com/database/wordpress/plugin/woocomme...
vdb-entry

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
.