CVE-2026-97657 | Tyche Softwares Abandoned Cart Pro Plugin up to 10.8.0 on WordPress Auto-Login Feature wcap_email_track_links user_email/wcap_nonce access control

October 14, 2026 Yanac

A vulnerability was found in Tyche Softwares Abandoned Cart Pro Plugin up to 10.8.0 on WordPress. It has been rated as critical. The affected element is the function wcap_email_track_links of the component Auto-Login Feature. The manipulation of the argument user_email/wcap_nonce leads to improper access controls.

This vulnerability is referenced as CVE-2026-97657. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More