Medium · 6.5 CVE-2025-26899 EUVD-2025-6648GHSA-9rmh-v8rw-6322

WordPress Recapture for WooCommerce Plugin <= 1.0.43 - CSRF to Settings Change vulnerability

Published Mar 15, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Recapture Cart Recovery and Email Marketing Product: Recapture for WooCommerce Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in Recapture Cart Recovery and Email Marketing Recapture for WooCommerce recapture-for-woocommerce allows Cross Site Request Forgery.This issue affects Recapture for WooCommerce: from n/a through <= 1.0.43.

Affected products

Vendor	Product	Affected	Fixed
Recapture Cart Recovery and Email Marketing	Recapture for WooCommerce	≤ 1.0.43	—

References

https://patchstack.com/database/Wordpress/Plugin/recapture-for-woocommerce/vulnerability/wordpress-recapture-for-woocommerce-plugin-1-0-43-csrf-to-settings-change-vulnerability?_s_id=cve vdb-entry