medium5.3
CVE-2026-92437
The Mailchimp for WooCommerce WordPress plugin before 6.3 does not require authentication, a nonce or an ownership check before it acts on a customer's abandon…
Impact
The Mailchimp for WooCommerce WordPress plugin before 6.3 does not require authentication, a nonce or an ownership check before it acts on a customer's abandoned-cart record identified from request-supplied data, allowing an unauthenticated attacker to modify or delete another customer's stored cart.
Affected products
| Product | Affected versions |
|---|---|
| Mailchimp For WooCommerce WordPress Plugin | before 6.3 |
Versions were read from the advisory text. No structured product data has been published for this record yet.