{"id":"CVE-2025-47608","aliases":["EUVD-2025-17522","GHSA-x6p4-577m-v525"],"status":"published","title":"WordPress Recover abandoned cart for WooCommerce plugin \u003c= 2.5 - SQL Injection Vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in sonalsinha21 Recover abandoned cart for WooCommerce recover-wc-abandoned-cart allows SQL Injection.This issue affects Recover abandoned cart for WooCommerce: from n/a through \u003c= 2.5.","severity":{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01161,"percentile":0.67376,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2025-06-09T15:54:07Z","modified":"2026-06-17T09:28:23Z","exploits":[{"source":"metasploit","id":"auxiliary/scanner/http/wp_abandoned_cart_sqli","title":"Abandoned Cart for WooCommerce SQLi Scanner","type":"auxiliary","date":"2020-11-05","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/http/wp_abandoned_cart_sqli"}],"products":[{"vendor":"sonalsinha21","product":"recover abandoned cart for woocommerce"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/recover-wc-abandoned-cart/vulnerability/wordpress-recover-abandoned-cart-for-woocommerce-2-5-sql-injection-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47608"},{"url":"https://patchstack.com/database/wordpress/plugin/recover-wc-abandoned-cart/vulnerability/wordpress-recover-abandoned-cart-for-woocommerce-2-5-sql-injection-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-x6p4-577m-v525"}],"sources":{"cve":[{"id":"CVE-2025-47608","title":"WordPress Recover abandoned cart for WooCommerce plugin \u003c= 2.5 - SQL Injection Vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in sonalsinha21 Recover abandoned cart for WooCommerce recover-wc-abandoned-cart allows SQL Injection.This issue affects Recover abandoned cart for WooCommerce: from n/a through \u003c= 2.5.","status":"published","published":"2025-06-09T15:54:07.876Z","modified":"2026-04-28T16:12:47.003Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","level":"critical","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:32:26.320248Z"}],"euvd":[{"id":"EUVD-2025-17522","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in sonalsinha21 Recover abandoned cart for WooCommerce recover-wc-abandoned-cart allows SQL Injection.This issue affects Recover abandoned cart for WooCommerce: from n/a through \u003c= 2.5.","status":"published","published":"2025-06-09T15:54:07Z","modified":"2026-04-28T16:12:47Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","level":"critical"}],"updated_at":"2026-11-02T19:05:41.660258Z"}],"ghsa":[{"id":"GHSA-x6p4-577m-v525","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in sonalsinha21 Recover abandoned cart for WooCommerce allows SQL Injection. This issue affects Recover abandoned cart for WooCommerce: from n/a through 2.5.","status":"published","published":"2025-06-09T18:32:14Z","modified":"2025-06-09T18:32:23Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","level":"critical"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:02:38.272027Z"}],"nvd":[{"id":"CVE-2025-47608","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in sonalsinha21 Recover abandoned cart for WooCommerce recover-wc-abandoned-cart allows SQL Injection.This issue affects Recover abandoned cart for WooCommerce: from n/a through \u003c= 2.5.","status":"published","published":"2025-06-09T16:15:42Z","modified":"2026-06-17T09:28:23.73Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","level":"critical","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:11:11.4244Z"}]}}