CVE-2025-46243
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Apr 22, 2025
Updated: Apr 29, 2025
CWE ID 352
Summary
CVE-2025-46243 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Recover abandoned cart plugin for WooCommerce. This issue allows malicious actors to manipulate users' sessions and execute unauthorized actions, such as changing order information or even making purchases, on affected websites. The CSRF vulnerability impacts the Recover abandoned cart plugin from version n/a through 2.2. Website administrators are urged to update the plugin to a secure version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.