Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-12
Smoove abandoned cart trigger for WooCommerce - Security Vulnerability (CVE-2026-123134)
The Smoove abandoned cart trigger for WooCommerce WordPress plugin before 4.3.6 does not sanitise and escape abandoned-cart data submitted by visitors before outputting it in the admin dashboard, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators.
PLUGIN
Smoove abandoned cart trigger for WooCommerce
CVE-2026-123134
Risk Score