CVE-2026-57637

Unauthenticated Cross Site Request Forgery (CSRF) vulnerability in Abandoned Cart Lite for WooCommerce versions up to 6.8.0. An attacker can trick an administrator into performing unintended actions without their knowledge.

The risk involves the possibility of performing unauthorized operations in the WooCommerce admin panel, such as modifying settings or deleting data, without required authentication.

It is recommended to immediately update the Abandoned Cart Lite for WooCommerce plugin to the latest available version that fixes this vulnerability.