CVE-2026-81543 | Tyche Softwares Abandoned Cart Pro Plugin up to 10.7.1 on WordPress Auto-Login/SMTP Connector privileges management

A vulnerability marked as critical has been reported in Tyche Softwares Abandoned Cart Pro Plugin up to 10.7.1 on WordPress. Affected is the function wcap_save_connector_settings/wcap_send_manual_email/wcap_abandoned_cart_info/wcap_change_manual_email_data of the component Auto-Login/SMTP Connector. This manipulation causes improper privilege management.

This vulnerability is tracked as CVE-2026-81543. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More