Input validation vulnerability in Abandoned Cart Lite for WooCommerce 5.8.2

The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to a type of attack called SQL Injection up to version 5.8.2. This attack takes advantage of a flaw in the plugin which does not appropriately secure user-provided information and does not properly prepare existing SQL queries. This allows unauthenticated attackers to add malicious queries to an already existing query, potentially gaining access to sensitive information from the database.

Detected in:

Abandoned Cart Lite for WooCommerce fixed vulnerable versions: >= * <= 5.8.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.