Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-47634 EUVD-2024-42559GHSA-g8f9-q4m9-5f38

WordPress CartBounty plugin <= 8.2 - Cross Site Request Forgery (CSRF) vulnerability

Published Oct 20, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Streamline CartBounty – Save and recover abandoned carts for WooCommerce woo-save-abandoned-carts allows Cross Site Request Forgery.This issue affects CartBounty – Save and recover abandoned carts for WooCommerce: from n/a through <= 8.2.

Affected products

VendorProductAffectedFixed
Streamline CartBounty – Save and recover abandoned carts for WooCommerce ≤ 8.2 —

References