13 versions
Abandoned Cart Pro for WooCommerce history.
Every release of Abandoned Cart Pro for WooCommerce is archived here with its changelog, file size, and security scan result. Use the archive to roll back to a stable release or audit what changed between updates.
11 of 13 releases scanned clean
v10.8.1Latest
October 8, 20269.7 MBScanned
Fixed
- – Security: An unauthenticated SQL injection via AES-CTR ciphertext forgery in the recovery link `validate` parameter was possible.
- – Security: An unauthenticated authentication bypass was possible due to malleable encryption and a bypassable HMAC in the recovery link `validate` parameter.
- – Security: An unauthenticated SQL injection was possible via the guest persistent cart `meta_value`. Reported by Wordfence.
- – Security: Auto-login could be triggered without a valid recovery signature.
September 22, 20269.7 MBScanned
Fixed
- – Admin emails were not sent for logged-in user carts when the user’s email address was not available in the user meta data for registered users.
- Security: Added wcap_nonce verification to cart/checkout links in manually resent cart recovery emails (coupon and non-coupon cases), preventing unauthorized triggering of these links.
- – A fatal error occurred when adding a product to the cart and then visiting the Cart or Checkout pages.
v10.7.1Unavailable
August 21, 20269.7 MBScanned
Fixed
- Included the missing vendor directory to resolve the AI Reporting abilities not being registered when the Enable AI Abilities option was turned on.
v10.7.0Unavailable
August 17, 20269.4 MBScanned
Fixed
- Carts were not abandoned when the Request for Quote (RFQ) plugin was active.
- Fatal error when the Store API session handler did not support get_session_cookie().
- Abandoned Cart Reminder Emails displayed the base currency instead of the customer-selected currency when using the FOX Currency Switcher plugin.
- The plugin update notification was not displayed when a trial license key was activated.
July 31, 20269.7 MBScanned
Other
- Dev – Added AI Reporting Abilities: lets AI assistants (such as Claude, connected via MCP) query abandoned-cart reporting data — top abandoned products, recovered revenue, recovery rates, and template performance.
Fixed
- Security: Resolved an issue where the abandoned/recovered cart REST API endpoints could be accessed without proper authentication under certain conditions.
- Resolved an issue where the plugin could unexpectedly deactivate itself on multisite installations where WooCommerce was activated per-site rather than network-wide.
- Resolved a fatal error that could occur if the plugin folder was renamed during installation or migration.
Improved
- Improved reliability of API rate-limiting under concurrent requests.
July 7, 20269.1 MBScanned
Other
- Dev – Added REST API endpoints to retrieve abandoned and recovered cart data, with support for filtering and pagination.
Fixed
- Resolved an issue where the Date Filter in the Abandoned Orders table did not display abandoned carts when a predefined date range was selected.
- Resolved an issue where GDPR Consent settings could not be saved from the admin panel and the consent message did not appear on the frontend when enabled.
- Addressed a compatibility issue with WooCommerce Dynamic Pricing where excessive autoloader calls during price calculations caused high PHP-FPM process usage and temporarily impacted site availability.
v10.4.0Unavailable
May 7, 20269.4 MBScanned
Fixed
- – Add to Cart popup did not open for variable products when a block-based product template was enabled on single product pages.
- – Coupon code was not applied via the Add to Cart popup when the product page was built using the AFGolf 2026 block theme.
v10.3.1Unavailable
March 25, 20269.4 MBScanned
Fixed
- – Addressed a critical vulnerability in the import API that could allow shop managers to modify arbitrary WordPress options. Implemented strict capability checks and restricted imports to plugin-specific settings only.
- Resolved an issue where the GDPR consent checkbox was not displayed on the Checkout page and appeared only in the pop-up.
- Resolved an issue where the Checkout email field became non-editable after page refresh or navigation when using Cart/Checkout blocks.
- Addressed a compatibility issue with the Advanced Product Fields Pro plugin that prevented abandoned carts from being captured.
- PHP warning triggered when adding a product to the cart.
- License Key page displayed the status as “License Active” even when the license had expired.
- Dashboard tab did not show correct data when a custom date range was selected.
- Incorrect data was displayed in the “Captured By” column for visitor carts.
- Product quantity increased when an email ID was entered in the ATC popup modal while using the Twenty Twenty-Five theme.
- Previously applied filters on the Abandoned Orders page persisted when revisiting, showing outdated data.
Other
- 2026-03-17 – Version 10.3.0
- = 2026-01-06 - version 10.2.0
Added
- – Added Import/Export functionality to transfer plugin settings (including email templates, SMS notifications, and configurations) across WooCommerce stores.
Improved
- Added a filter to allow admin notifications for visitor/guest abandoned carts even when no email address was available.
Why archive
Sometimes the latest release isn't the one you need. The archive lets you pin Abandoned Cart Pro for WooCommerce to a known-good version, or roll back while a bug is investigated. Every release stays scanned and reachable.