CVE-2025-47608 in Recover Abandoned Cart for WooCommerce Plugin

Sumário

de MITRE • 09/06/2025

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in sonalsinha21 Recover abandoned cart for WooCommerce allows SQL Injection. This issue affects Recover abandoned cart for WooCommerce: from n/a through 2.5.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsável: Patchstack
• Reservar: 07/05/2025
• Divulgação: 09/06/2025
• Moderação: aceite
• Entrada: VDB-311774
• CPE: pronto
• CWE: CWE-89 (confirmado)
• CVSS: 9.3 (CNA)
• EPSS: 0.00949
• KEV: não
• Atividades: muito baixo
• Sector: Transportation, Hostingprovider, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-47608
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-47608
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-47608/