Release v10.8.1
Abandoned Cart Pro for WooCommerce v10.8.1
What's new in v10.8.1
Abandoned Cart Pro for WooCommerce v10.8.1 was released on . According to experts, the average cart abandonment rate is around 70% to 75%. See the full changelog below and compare with the complete version history.
Release details
Released
9.7 MB
File available
Changelog
Fixed
- – Security: An unauthenticated SQL injection via AES-CTR ciphertext forgery in the recovery link `validate` parameter was possible.
- – Security: An unauthenticated authentication bypass was possible due to malleable encryption and a bypassable HMAC in the recovery link `validate` parameter.
- – Security: An unauthenticated SQL injection was possible via the guest persistent cart `meta_value`. Reported by Wordfence.
- – Security: Auto-login could be triggered without a valid recovery signature.
Compatibility
- Requires WordPress
- 6.3 or higher
- Tested up to
- 7.1.3
- Requires PHP
- 7.4
- Requires WooCommerce
- 4.0.0
- WooCommerce tested
- 11.2.1
Verified safe
Abandoned Cart Pro for WooCommerce v10.8.1 scanned clean with no security threats detected.
View full scan report