CVE-2026-65557

The Abandoned Cart Lite for WooCommerce versions up to 6.8.0 are vulnerable to a Cross Site Scripting (XSS) attack, allowing attackers to inject malicious scripts into web pages viewed by users. This could lead to unauthorized access to sensitive user information or session hijacking. E-commerce site administrators using this plugin should prioritize patching to mitigate potential exploitation risks.