CVE-2025-31865
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Apr 1, 2025
CWE ID 862
Summary
CVE-2025-31865 is a Missing Authorization vulnerability affecting the CartBoss SMS Abandoned Cart Recovery feature. The issue arises due to CartBoss's failure to enforce proper access control security levels, which can be exploited. Attackers can potentially gain unauthorized access to the SMS Abandoned Cart Recovery functionality in versions 4.1.2 and below, putting sensitive data at risk. The vulnerability could lead to unintended modifications or disclosures, emphasizing the importance of timely software updates and secure access controls.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress